Original link: Hackers hijack npm packages with 2 billion weekly downloads in supply chain attack / BleepingComputer.
Ouch.