NPM install is stealing your passwords – I built a tool to catch it from Hacker News on 2026-02-24 03:45 (#73SHY) Comments
