https://securityreport.com/where-did-these-mysterious-prismjs-npm-versions-come-from/