Nearly 100,000 NPM Users’ Credentials Stolen in GitHub OAuth Breach