NPM 'Is' Package Hijacked in Expanding Supply Chain Attack socket.dev 13 points by feross 14 hours ago