Open source package with 1M monthly downloads stole user credentialsarstechnica.com6 points·aureliusm··0 commentsOpen articleSaveView on HN