BA vulnerable npm package which modifies bashrc