That's odd. I've worked with node for a couple years. I've used npm hundreds of ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

dmpk2k on June 3, 2013 | parent | context | favorite | on: Where is all the Node.js malware?

That's odd.

I've worked with node for a couple years. I've used npm hundreds of times, and I can count on one hand the number of times I've used it in combination with sudo (and all but one were a mistake).

  ~/dev $  ls /usr/local/lib/node_modules/
  jsontool npm

Every time I've used npm with sudo I've received a big warning in red to not do that.

reedlaw on June 3, 2013 [–]

Which version are you using? And do you install packages globally using the -g switch?

dmpk2k on June 3, 2013 | [–]

Currently 1.2.11. As you can see above, I've only ever installed one package globally (jsontool).

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact