Disrupting supply chain attacks on npm and GitHub Actions — Blankdot