Cybersecurity researchers have discovered a new supply chain attack in which legitimate packages on npm and the Python ...