"We immediately initiated an investigation and removed the packages from the npm registry. "While our investigation is ...