3 ms·
When running `npm install` without the mitigation, the attacker can steal your source code right away, among other things. Also, developers adding new packages
by efortis 6y ago
When running `npm install` without the mitigation, the attacker can steal your source code right away, among other things.
Also, developers adding new packages could compromise their environment because that's done running e.g. `npm install react`.