#node-gyp | GigaTap

/en/articles/tag/node-gyp GigaTap article archive

GigaTap articles tagged node-gyp.

Node-gyp Supply Chain Worm: Install-Time Execution Risk - A npm supply chain worm abuses node-gyp install-time builds via binding.gyp, bypassing lifecycle-script monitoring and exposing CI and cloud credentials.