NPM fixes private package names leak, serious authorization bug | Hacker News Reader