Ongoing NPM supply chain attack uses binding.gyp to spread like a worm | Hacker News Reader