anyone an actual security researcher who knows how (and with what authority) to yell at NPM to get this taken down?https://www.npmjs.com/package/ilovingcats