This is probably the biggest hack of the year. As of the writing it had infected 140+ packages including some from big names like CrowdStrike. npm is in a LOT of things, and this thing is a true worm.