Npm auth tokens exposed on GitHub | Dark Hacker News