evill-package (npm): An npm package demonstrating how packages can steal your data (but not actually doing so!)
Keywords: evil|demo|attack|npm