40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials The Hacker News