Skip to content

Instantly share code, notes, and snippets.

@Metnew
Created December 21, 2018 02:09
Show Gist options
  • Select an option

  • Save Metnew/bdd0495da2ac564cb051483359b0e805 to your computer and use it in GitHub Desktop.

Select an option

Save Metnew/bdd0495da2ac564cb051483359b0e805 to your computer and use it in GitHub Desktop.
Experiment with permissions when installing malicious packages
{
"name": "saferoot",
"version": "0.0.1",
"description": "",
"main": "index.js",
"scripts": {
"install": "sudo id",
"pre--install": "#sudo npm i --unsafe-perm"
},
"author": "",
"license": "MIT",
"dependencies": {
"react": "^16.6.1",
"react-dom": "^16.6.1"
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment