express-nodejs 5.2.2
Malicious preinstall script
“Fast, unopinionated, minimalist web framework”
Foreign repo claim with preinstall curl pipe to nodenpm preinstall executes replayed third-party code through Node stdin
SHA-25646e976a1a4fc757367bcc0e0c72f5a621da28b0c9d9ce80a5c596f9891da44c7