Another NPM supply chain worm is tearing through dev environments · HackerTrans