Is strapi-plugin-blurhash malicious? — npm — SafeDep - Real-time Open Source Software Supply Chain Security