ESLint-config-prettier: How NPM Package with 30M Downloads Spread Malware