npm’s debug and chalk packages compromised - prijm