thumbnail XRP supply chain attack: Official NPM package infected with crypto stealing backdoor