ChainDrop NPM supply-chain attack infects packages | Dark Hacker News