npm package steal browser passwords