Stop using vsts-NPM-auth, it may be a 0-day | Hacker News Reader