Active NPM supply chain attack: Tinycolor and 40 Packages Compromised | Not Hacker News!