After major attack: Package manager NPM cuts old security ties | Hacker News Reader