PackageGate: Zero-Days in JavaScript Package Managers but NPM Won't Act | Hacker News Reader