Case studies and GitHub Advisory Database data

Modified package published to npm, containing malware that exfiltrates private key material