Live data from Hacker News

Building my npx business card

ashley.dev

11–12 of 12 posts

Re: Building my npx business card

#11
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Re: Building my npx business card

#12
post #3

Do these npx business cards run arbitrary code on your computer?

npx Run a command from a local or remote npm package Description This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

Post reply on HN