New NPM supply-chain attack compromises major ENS and crypto libraries