Supply Chain in Crisis: How the September 2025 npm Attack Compromised Millions of Projects

A significant npm supply chain attack was detected on September 8, 2025, affecting many popular JavaScript packages such as chalk, debug…