4 ms·
But npm already decompresses every package because it shows the contents on its website. So yeah it can be malicious but it already has dealt with that risk.
by bhouston 2y ago
But npm already decompresses every package because it shows the contents on its website. So yeah it can be malicious but it already has dealt with that risk.