Another one-line NPM package breaks the JavaScript ecosystem · HackerTrans