ChainDrop NPM supply-chain attack infects packages | Hacker News Reader