SHA1-Hulud, NPM supply chain incident | Hacker News Reader