Lesson 7 of 9 · 30m

npm, Lockfiles, and Dependency Hygiene

Lifecycle scripts are RCE during install. Lockfiles, `npm ci`, typosquats, and dependency confusion, practically.