Protecting your Supabase projects from npm supply chain attacks — Blankdot