Puppeteer
Named by 5 kept items in this workspace.
4 items name it under affected products and 1 under tools.
Search every workspace for Puppeteer. It matches the name as written, so it can find other things that share it.
The items that name it 5
Binary downloader requiring install-script approval
9.6M weekly downloads; uses postinstall script
updated in VICE 3.5.0 changelog, removing the vulnerable archive extraction chain
Popular package using lifecycle install scripts; 10 million weekly downloads
All technologies in this workspace.