One developer's act of protest has become a supply chain attack on a popular JavaScript developer tool. Security vendor Snyk is advising developers to be on the lookout for a malicious component that ...