Typing one install command has run strangers’ code on developer machines for over a decade, but the tool’s new version blocks that step by default
A single typed command has fetched and run code from strangers on developer laptops for more than fifteen years. Nobody reads it…