Another one-line NPM package breaks the JavaScript ecosystem | Hacker News Reader