During the two-hour window on Monday in which hijacked npm versions were available for download, malware-laced packages ...