PyTorch discloses malicious dependency chain compromise over holidays | Hacker News Reader