All your packages are belong to us - Protecting your npm dependencies