Popular NPM software packages hit in supply-chain attack | Not Hacker News!