▲ 1 Malicious NPM package pino-SDK-v2 exfiltrates .env secrets to Discord by Sudhanshu2310 | Mar 6, 2026 | 0 comments on HN