exptred 5.2.2
Malicious preinstall curl pipe
“Fast, unopinionated, minimalist web framework”
curl command in preinstall scriptnpm package executes a high-risk install-time command
SHA-256e06f8b2c10ff515fa709b56993d79c5147f131da0376f50596a4d6c338fab0d3