I’ve never seen code that is downloaded run itself. Why not be the change you want to see in the world and run sudo or spawn your browser in a jail. Or download as another user.
Welcome to npm post-install scripts... https://docs.npmjs.com/cli/v11/using-npm/scripts
Welcome to npm post-install scripts... https://docs.npmjs.com/cli/v11/using-npm/scripts