Malware found in two NPM packages with 23M weekly downloads | Hacker News Reader