MemTensor NPM and PyPI packages compromised with credential stealer | Hacker News Reader