trying to build from source - my AV detected a malicous part, event-stream with the package flatmap-stream is in use -> https://medium.com/intrinsic/compromised-npm-package-event-stream-d47d08605502
-- nodemon-webpack-plugin@4.0.3 -- nodemon@1.11.0
-- ps-tree@1.1.0 -- event-stream@3.3.6