How Supabase is responding to npm supply chain attacks and practical steps you should take today to reduce your risk.