3 ms·

Not really different from any other typo-squatting (e.g. domains).

• db48x 9y ago
  Except that in this case you're installing software on your computer, not just visiting a webpage.
  • boramalper 9y ago
    You might also be downloading the software from a webpage. ;)
    • pilif 9y ago
      That would still be a two-step process (downloading from the browser and then manually executing it). `npm install` runs code as part of the initial step. Also, `npm install foo` will of course not just run code from `foo` but from all its dependencies and their dependencies dependencies as well.