GitHub supply chain attack spills secrets from 23,000 projects | Hacker News Reader