Malicious Bun Script Found in NPM Package Bumps
*`package.json` includes a `preinstall` script running `node setup_bun.js`, along with `setup_bun.js` and `bun_environment.js` files that appear to contain the malware.* 1 comments on Hacker News.
*`package.json` includes a `preinstall` script running `node setup_bun.js`, along with `setup_bun.js` and `bun_environment.js` files that appear to contain the malware.*
*`package.json` includes a `preinstall` script running `node setup_bun.js`, along with `setup_bun.js` and `bun_environment.js` files that appear to contain the malware.* 1 comments on Hacker News.
*`package.json` includes a `preinstall` script running `node setup_bun.js`, along with `setup_bun.js` and `bun_environment.js` files that appear to contain the malware.*
Hacker News story: Malicious Bun Script Found in NPM Package Bumps
![Hacker News story: Malicious Bun Script Found in NPM Package Bumps]()
Reviewed by Tha Kur
on
November 24, 2025
Rating:
No comments: