[staticassertion]

A process can not dump the memory of another process if those processes are executing under different users, or the process performing the dump is root.

On many OS's there are even more strict restrictions, where within a user a process can only dump the memory of processes that are its direct descendants.

[soheil]

1p runs as the logged in user so does a hypothetical malicious npm package.