Vue-CLI might contain malware from a dependency | Hacker News Reader