Several popular npm packages with millions of weekly downloads were targeted, and one used as a launchpad for malware ...