Active Supply Chain Attack: NPM Phishing Campaign Leads to Prettier Toolingsocket.dev2 pointsferossa year ago