Checkmarx Reveals Threat Actor 'Fully Automating' NPM Supply Chain Attacks