Malicious Bun Script Found in NPM Package Bumps

5 points by kothariji ↗ HN
*`package.json` includes a `preinstall` script running `node setup_bun.js`, along with `setup_bun.js` and `bun_environment.js` files that appear to contain the malware.*

1 comment

[ 2.1 ms ] story [ 17.6 ms ] thread