@ctrl/tinycolor Supply Chain Attack Post-mortem

Lessons learned from becoming the unexpected face of a npm supply-chain attack.