https://registry.npmjs.org/fb-dotslash/-/fb-dotslash-0.5.8.tgz Virus detection from checkpoint

[eightsixeight]

https://registry.npmjs.org/fb-dotslash/-/fb-dotslash-0.5.8.tgz Virus detection from checkpoint

Endpoint Offline File Reputation detected malicious file (be11b839f91d68ef64f2418ce111d473468c6c8e0cccb6bd95e89444dd69c0c9dacb4f2f6383136c7b2bd3927aa64fc62b1ae7429e7a2db2a0c743a5a28eb5x2552818).

SHA1= 7706fbd48738b2170459918bc4d1e3187cd369aa

checkpoint intercepts a .exe file

 ERR_PNPM_EBUSY  Failed to add tarball from "https://registry.npmjs.org/fb-dotslash/-/fb-dotslash-0.5.8.tgz" to store: EBUSY: resource busy or locked, rename 'C:\Users\xxx\AppData\Local\pnpm\store\v10\files\53\be11b839f91d68ef64f2418ce111d473468c6c8e0cccb6bd95e89444dd69c0c9dacb4f2f6383136c7b2bd3927aa64fc62b1ae7429e7a2db2a0c743a5a28eb5x2552818' -> 'C:\Users\xxx\AppData\Local\pnpm\store\v10\files\53\be11b839f91d68ef64f2418ce111d473468c6c8e0cccb6bd95e89444dd69c0c9dacb4f2f6383136c7b2bd3927aa64fc62b1ae7429e7a2db2a0c743a5a28eb5-exec'

This error happened while installing the dependencies of react-native@0.85.1
at @react-native/community-cli-plugin@0.85.1
at @react-native/dev-middleware@0.85.1
at @react-native/debugger-shell@0.85.1

[6TELOIV]

I wanted to similarly flag that this pattern of fetching remote executibles at runtime is causing headaches for our team due to security restrictions. I'm running into this as well due to the inclusion of @react-native/debugger-shell