ECO SOC TCH UT Utkarsh Shukla Supply Chain in Crisis: How the September 2025 npm Attack Compromised Millions of Projects A significant npm supply chain attack was detected on September 8, 2025, affecting many popular JavaScript packages such as chalk, debug…