420 points Nov 27, 2025 GitLab discovers widespread NPM supply chain attack 258 comments OuterVale gitlab.com