How TypeScript devs can avoid getting pwned by malicious packages | Hacker News Reader