Never run an installation command you don’t recognize. Malicious typosquatting (e.g., npm install unkown-package ) can lead to security risks.