For those who don't follow the news (keep up the good work m8, news are toxic for the intellect), there was a huge supply attack that successfully targeted the NPM