Reports surfaced that the widely used npm package @ctrl/tinycolor had been compromised by Wormable Malware as part of a ...

It's a lot simpler than you think, and you've got lots of flexibility in how you can make it work best for you.