New Supply Chain Attack Targets Legitimate npm Package with 45,000 Weekly Downloads Cyber Security News