Updated: Catalog of all major npm/nodejs ecosystem attacks since May 2025-2026: https://npm-supply-chain-attacks-25-26.pagey.site/
All used techniques and mitigation strategies, including this one: https://npm-supply-chain-attack-techniques.pagey.site/