The breach hit core JavaScript libraries such as chalk and strip-ansi, downloaded billions of times each week, raising alarms over the security of open-source software.
You might also be interested in reading EQS-CMS: Haier Smart Home Co.,Ltd.: Announcement in Relation to the Change of Use and Cancellation of Repurchased Shares.