NPM: Package install scripts vulnerability | Hacker News Reader