NPM Security Best Practices How to stay safe from NPM supply chain attacksweeklyfoo #104 / 2025-09-29 Open securitynpm