On: Upcoming breaking changes for npm v12

[peterkelly]

Now all the malware can move from the install script to the module itself where it will inevitably still be run

[hinkley → peterkelly]

But at least we have ways now to stay a week behind everyone else and see how many people drop dead before us.

So what it'll really be is people injecting exploits that are patient.