Massive Phishing Campaign Bombards Open Source Repositories With Over 144K Packages