More than half of the Node.js software platform packages could have been compromised due to weak access passwords