Supply chain attack on LottieFiles NPM package
twitter.com