New IronWorm malware hits 36 packages in NPM supply-chain attack | Hacker News Reader