Npm still very vulnerable to typosquatting | Hacker News Reader