Malicious versions of Nx and some supporting plugins were published

And how’s the situation with Bun?

All good https://news.ycombinator.com/item?id=45041302

From: https://bun.sh/docs/install/lifecycle

> Packages on npm can define lifecycle scripts in their package.json. These scripts are arbitrary shell commands that the package manager is expected to read and execute at the appropriate time.

> But executing arbitrary scripts represents a potential security risk, so — unlike other npm clients — Bun does not execute arbitrary lifecycle scripts by default.