How npm install scripts can be weaponized: A real-world example of a harmful npm package

How npm preinstall and postinstall scripts can serve as methods to inject malicious code into open source packages.