Disrupting supply chain attacks on NPM and GitHub Actions