thumbnail npm Supply Chain Attack Targeting Germany-Based Companies