SHA1-Hulud, NPM supply chain incident | Dark Hacker News