Supply chain attack on LottieFiles NPM package | Hacker News Reader