Security The npm “chalk/debug” compromise: what happened, who’s exposed, and how to clean it up byAlex IvanovsSeptember 10, 2025