Finding security vulnerabilities in third party packages | Hacker News Reader