Over 170K users caught up in poisoned Python package ruse | Hacker News Reader