discovered
@fairwords/websocket is identified in the SafeDep analysis "@fairwords npm Packages Hit by Credential Worm". Three @fairwords npm packages were compromised with a self-propagating worm that harvests credentials, crypto wallets, Chrome passwords, and spreads to other packages using stolen npm tokens.