A popular publisher of npm web modules was personally hacked and his modules had a drainer publish. Stay safe