Malicious NPM packages found and removed | Hacker News Reader