Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System
A new variant of the Miasma worm has been discovered exploiting npm's binding.gyp build file to execute malicious code during package installation, bypassing traditional package.json script audits. The worm uses GYP's co…