The JavaScript development community faced one of its most sophisticated supply chain attacks in September, when a ...