Why Scanners Fail in Practice: Lessons from the Shai-Hulud Attacks on NPM | Hacker News Reader