npm install hook (node/npm) spawning shell or LOLBin child processes

ills3c Intel&Coffee@Ills3C

•updated 2 days ago•2•0•4

Detects node.exe or npm spawning command shells or Living-off-the-Land Binaries (LOLBins) as part of npm preinstall or postinstall lifecycle scripts.