SANDWORM_MODE: npm Worm Poisoning AI Toolchains Socket’s Threat Research Team dropped an incredibly detailed report