Show HN: A malicious NPM install reads your .env. On my Mac it reads a decoyjitpass.com·2 pts·bukershok·0