same attacker targeting users via phishing emails and malicious typosquatting packages downloading malware