The project has been moved to the golangci organization because the GitHub account of the original author (@tdakkota) is no longer available.
The npm packages were available since July, have elaborately obfuscated malicious routines, and rely on a fake CAPTCHA to ...