Self Propagating NPM Malware Compromises over 40 Packages