NPM packages deploy reverse shells when installed | Hacker News Reader