Living Off The Ecosystem

The implicit attack surface. Files, env vars, flags and hooks that run on install, at startup, on import, and when a command starts.

/

Install time

Runs while dependencies download and build. The app has never started.

Runs while the interpreter boots, before your entrypoint.

Runs on import or require, for every module the app loads.

Runs when someone invokes a command or tool, with full process permissions.

Runs only in interactive sessions, so it targets developers.