Tell HN: Node.js and npm prone to critical phishing vulnerability | Hacker News Reader