CVE-2020-5252 and the State of Package Auditing Security – Mulch | Hacker News Reader