The npm supply chain attack everyone's freaking out about this week is nearly identical to the one from 2021. And 2022. And 2023. And 2024. npm audit clear is not the same as secure.