Supply chain attacks against npm packages

Lately, there have been multiple supply chain attacks targeting the npm ecosystem. I know that these types of attacks have happened in the past, but when two occur within a fairly short period of time, you have to start thinking about the viability of this way of handling dependencies. &#xA; The first attack — I don’t know if it ever got a name — but in the beginning of September (2025), Kevin…