npm: Lottie Player NPM package compromised in supply chain attack

Threat actors used a compromised developer token to initiate a supply chain attack that poisoned LottieFiles' Lottie Player component.