Vue-CLI might contain malware from a dependency | Dark Hacker News