An npm package named 'rand-user-agent' has been compromised in a supply chain attack to inject obfuscated code that activates ...