NPM attack targets Zapier and security tool browser extensions | Hacker News Reader