[cherrycreek00]

Am I understanding right that machines without npm aren't affected by this particular strain?

The headline got my heart going pretty good this morning.

[reorder9695]

The PKGBUILD files specified npm as a dependency, so it would've been installed prior to installing the malicious file, so not having npm is by no means a guarantee.

[phi-go]

There is a link to a shell script in the article to check if you have any impacted package installed.