A new global security breach in npm puts most apps and crypto at risk, showing how fragile the digital supply chain is for businesses worldwide.