Fixed security issues with package.json - one should not be allowed to install global packages in postinstall