I also maintain these sites for npm related attacks (since there have been so many since past 1.5 years):
1. Techniques exploited: https://npm-supply-chain-attack-techniques.pagey.site/
2. Documented attacks: https://npm-supply-chain-attacks-25-26.pagey.site/