GHSA-jxr6-qrxx-2ph2: num2words subjected to phishing attack, two… · Watchpost