Security Research 1 Operationalizing npx Confusion: From DEF CON Research to Automated Supply Chain Defense with npxconfuse Jul 29, 2026