Widespread NPM Supply Chain Attack: Breaking Down Impact and Scope Across Debug