Skip to content

Implicit node-gyp rebuild via binding.gyp

Named by 2 kept items in this workspace.

Search every workspace for Implicit node-gyp rebuild via binding.gyp. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Socket: npm v12 Ships With Install Scripts Off by Default
    article2026-07-15It is written here as Implicit node-gyp rebuild via binding.gyp ("Phantom Gyp").

    Miasma waves used a small binding.gyp file to trigger the implicit node-gyp rebuild npm runs for packages shipping a binding.gyp, running code during install with no explicit lifecycle script, evading scanners that only watch preinstall/postinstall fields

  • npm v12 delivers one of the biggest security improvements in years
    article2026-06-11

    A package shipping a binding.gyp file causes npm to run an implicit node-gyp rebuild during install, allowing code execution even when the package.json scripts field is clean.

All techniques in this workspace.