Fake packages flood NPM registry in major attack – here's what we know | Hacker News Reader