Issue 294 - A thorough examination of an exploited npm package (22)