[rwth-security] Typo-squatting NPM software supply chain attack uncovered