A new supply chain attack against the NPM repository is using novel, self-propagating malware (also known as a worm) to continue spreading itself.| www.sysdig.com