Hacker News Reader

Sorry, I am unfamiliar with ripgrep. Is this simply scanning for the string `_0x112fa8`? Could we do the same thing with normal grep -r?

yes. ripgrep just does it faster, is all.

But also respects .gitignore by default so I’m not sure you want to use ripgrep to scan your node_modules

For others who didn't know, the -u flag in the OP's command makes it so ripgrep _will_ search files even if they're gitignored

-u searches through ignored files

-uu searches through ignored and hidden files (eg dotfiles)

-uuu searches through ignored, hidden, and binary files (ie everything)

Isn't the intended behaviour of original comment checking the node_modules folder for the "infected" string.

Make it work, make it right, make it fast.

For security checks, the first 2 out of 3 is just fine.

Sure, but if you can get the last for free, why not?