B blog.npmjs.org Security researcher found ~0.2% of npm users re-used leaked passwords for npm 3 points qiqing 9 years ago 1 comments