Open source code repositories PyPI, NuGet and npm have been polluted with a flood of junk packages relating to popular online games like Roblox and Fortnite, recent analysis shows.