Malware found in two NPM packages with 23M weekly downloads | Dark Hacker News