Active Supply Chain Attack: NPM Phishing Campaign Leads to Prettier Tooling