Binary planting and arbitrary file (over)write vulnerabilities in NPM/pnpm/yarn | Hacker News Reader