Ongoing social engineering attacks via GitHub / NPM | Hacker News Reader