3 ms·

If you look at the last N npm worms, they all used postinstall scripts.

• cluckindan 5mo ago
  Is that even true?
  • tkel 5mo ago
    shai-hulud and variants https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-s...
    • cluckindan 5mo ago
      So N=1? 2? 3?
      • tkel 5mo ago
        at least 3 that i can remember off the top my head in these last couple months. If you look further back you will find more.