Compromised NPM Package: event-stream | Hacker News Reader