S socket.dev Active NPM supply chain attack: Tinycolor and 40 Packages Compromised 85 points feross 1 year ago 36 comments