Posthog NPM packages are compromised | Not Hacker News!