@fasterthanlimeamos I actually reported that to pnpm a while back, although specifically for the pnpm create subcommand which, if you run with --help, will download and execute `create---help` from npm. They said to just open an issue since they don’t think it’s a high-risk issue and I never bothered but interesting nonetheless

@fasterthanlimeamos part of the reason why they didn’t think it’s a big deal is that you can’t actually get create---help onto npm because create-help already exists. But I did manage to snag create---hepl and create---hlep so I like to image every so often someone sees this message in their terminal

0

If you have a fediverse account, you can quote this note from your own instance. Search https://hachyderm.io/users/nrab/statuses/114206106320448980 on your instance and quote it. (Note that quoting is not supported in Mastodon.)