That one time I installed a rogue npm package
You always hear about it, but never think you will be the one who gets hit. Today it was my turn. Thankfully no harm was caused, but it’s a fun one to tell.
At work I got into the habit of running npm via docker, and of course for just installing dependencies, its a whole lot to remember:
Read more...