How I exploited NPM downloads... and why you shouldn't trust them | Dark Hacker News