Another NPM supply chain worm is tearing through dev environments
theregister.com