Re:How to build an NPM worm
by mcintyre1994 on Saturday July 14, 2018 @02:38AM
(#17529147)
The point is that you just have to engineer your way to commit access on master once. If it at least pointed to a github release or an immutable equivalent, it'd be vetted by the author before millions of people point a ruby eval at it.
to be fair, there's nothing particular about the branch called 'master'.