A software supply chain attack has hit the popular JavaScript package is, which has almost 2.7 million downloads per week. Maintainer Jordan Harband writes on Bluesky that attackers had taken over ...