Supply Chain Thousands Download Malicious npm Libraries Masquerading as Legitimate Tools easy4hub December 19, 2024