npm (Node's package manager) leaks all user password hashes and salts | Heykuki News