Crypto-coin-stealing code sneaks into fairly popular NPM lib | Hacker News Reader