Security research and engineering notes.https://grote.is/en-ushttps://grote.is/npm-the-fourth-hook/https://grote.is/npm-the-fourth-hook/Postinstall scripts are lame, my JavaScript malware is written in CSat, 24 Jan 2026 00:00:00 GMTnpmsupply chainresearch