New Ghost Campaign Uses Fake npm Progress Bars to Phish Sudo Passwords