Sonatype NPM event-stream 3 distributing a malicious package | Dark Hacker News