Incident hitting NPM users is likely the biggest supply-chain attack

Prior discussion: https://news.ycombinator.com/item?id=45169657