GitHub repos bombarded by info-stealing commits masked as Dependabot | Hacker News Reader