Oh look, another day and another NPM supply chain attack.