Malicious SSID used to compromise popular Node.js package