Widespread Supply Chain Attack on NPM: Trojanized jQuery Discovered