Description of the Issue: In September 2025, more than 40 NPM packages were compromised in a large-scale supply-chain attack. The malware executes during installs, steals secrets, and persists through GitHub workflows. Read more here: StepSecurity: Task: Assume your organization is impacted. Write a short report covering: How you discovered the
