A new postinstall script was detected in version 3.5.0-next.1 of the package extension-develop.
Script content:
node -e "const fs=require('fs');const path=require('path');const entry=path.join(__dirname,'dist','postinstall.cjs');if(fs.existsSync(entry))require(entry);"
see npm documentation on package scripts for more details.
and the detector. to understand why this script might be dangerous.
to get the alert only for dangerous scripts, please visitthe telegram
This could be a security risk. Please investigate.