can't believe i just spent 2 hours troubleshooting a project because some npm package had a