NPM package FakerJS with millions of weekly downloads hacked