“A severe npm supply chain worm spreading across the internet.”