2025-11-18 13:18:43
#LazyWeb question regarding the dreaded NPM #GlassWorm or similar malware to harvest auth tokens:
To avoid a potential infection leading to harvesting the token usually stored in `~/.npmrc`, I changed that file's content to:
`//registry.npmjs.org/:_authToken=${NPM_TOKEN}`
...…