Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware