Malicious PyPI packages found stealing developer's credentials | Hacker News Reader