XSS CVE in Snyk Advisor allowed making malicious packages look popular and legit | Hacker News Reader