npm-prepare

The npm prepare Script: What It Does and How to Use It Safely

The npm prepare lifecycle script runs at more moments than most developers realize, including when someone installs your package from git. Here is exactly when it fires and how to keep it from becoming an attack vector.