A Confusing Dependency (Fake and malicious libs in jcenter) | Hacker News Reader