PackageGate npm Packages JavaScript Shai-Hulud Git-based Mjobtime SQL Injection Microsoft CVE-2025-51683 SharePoint Homoglyph Marriott Vercel-Hosted