ended9월 1일· 1 sources
The npm Worm That Brought Its Own Interpreter
Why it matters
On November 24, 2025, researchers identified a wave of backdoored npm packages that had been downloading a second JavaScript runtime during install. Not a shell script, not a compiled binary from a CD...
1
Sources
+0
24h
—
Growth
20d
Active