Six Malicious Packagist Themes Deliver Trojanized jQuery Payloads