Full threadbad_oss·Attacker Uses a Popular TikTok Challenge to Lure Users Into Installing Malicious PackageView on HN