InfoWorld

Your npm install was safe. What happens when the package runs?

Blocking install scripts closes one route for malicious npm packages. The malicious indexed-btree package shows why ...