Miasma NPM Supply Chain Attack: Self-Spreading Worm via Phantom Gyp