@boldreports/javascript-reporting-controls flagged credential stealer (npm) — Cremit · NHI Credential Stealer Index