Hacker News Reader

Because it's never been considered an interesting target, compared to npm's reach?

For a while CPAN was a very big deal and those packages were probably on just about every corporate network on Earth.