First, people need to remember that the original attack on tools like ChalkJS was a successful MFA phishing attempt on npm’s ...