NPM API Search registry.npmjs.org AND Authorization Exploit https://registry.npmjs.org/-/whoami Authorization: Bearer {{token}}