GitLab discovers widespread NPM supply chain attack | Not Hacker News!