Npm shrinkwrap allows remote code execution | Hacker News Reader