Hackers exploited a compromised npm package to breach cloud systems and gain full AWS administrator access within 72 hours.