Research

Recovering a removed npm malware file

Recovering @goodjavascript/dotenv@1.0.0 from Software Heritage, checking its identity against jsDelivr, and inspecting its response-to-code execution path.