Loading: Small world with high risks: a study of security threats in the npm ecosystem