[Pkg-javascript-devel] Bug#960289: npm: 'Permission denied' error when running as root

[Jérémy Lal]

Le lun. 11 mai 2020 à 17:41, Nikolay Shaplov <dhyan at nataraj.su> a écrit :

> В письме от понедельник, 11 мая 2020 г. 17:19:07 MSK пользователь Jérémy
> Lal
> написал:
>
> > > # cd /srv
> > > # npm install matrix-appservice-irc --global
> >
> > You are running an untrusted module as root.
> > I strongly advise against that.
> I am _installing_ untrusted module as root. Am I not?
>

npm modules can have postinstall scripts.
Well-known modules might be trustable (they might not) but the module
you're trying to install do have an issue (checksum mismatch) and might
have been tampered with.

Jérémy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20200511/b9480aaa/attachment.html>