Hallucinated packages create security blind spots | Hacker News Reader