Show HN: A malicious NPM install reads your .env. On my Mac it reads a decoy j jitpass.com 2 bukershok 1 month ago 0 comments