GitHub code search skips any file above 350 KiB. JFrog's first sweep for the testmetest worm turned up hooks in 26 repos, each calling an init.js that looked blank. Those files weigh about 13 MB.
Walking every repo tree directly: 42 armed.
#npm #CodeSearch #Malware
00021









