npm search RCE? - Escape Sequence Injection - eviltoast