The npm Supply Chain Attack Nobody Is Talking About — And How to Protect Yourself

I was doing a routine npm install on a Tuesday morning. Nothing unusual. Same command I've typed...