NPM 'Is' Package Hijacked in Expanding Supply Chain Attack | Dark Hacker News