Some more information about the payload here: https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised