Mass npm Supply Chain Attack Hits TanStack, Mistral AI, and 170+ Packages