NPM CTO: `crossenv` malware on the npm registry | Hacker News Reader