GitLab discovers widespread npm supply chain attack

GitLab has identified a significant npm supply chain attack involving a destructive malware variant, potentially compromising user data.