How to Audit a npm Package for Malware in 10 Minutes

You are about to run npm install some-package and hand a stranger's code full access to your machine, your environment variables, and your CI pipeline. Last year alone, hundreds of malicious packages ...