NPM Slop and Wonky Software Supply Chains · HackerTrans