NPM install is arbitrary code execution. We give it a disposable VMmojave.sh4 points·stwrt··1 commentOpen articleSaveView on HN