only escape arguments, not the command name

PR-URL: #1906 Credit: @nlf Close: #1906 Reviewed-by: @ruyadorno
npm · Oct 9, 2020 · 9320b8e · 9320b8e
1 parent 518fa12
commit 9320b8e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/exec.js b/lib/exec.js
@@ -90,7 +90,7 @@ const exec = async args => {
 
     if (binExists) {
       return await runScript({
-        cmd: args.map(escapeArg).join(' ').trim(),
+        cmd: [args[0], ...args.slice(1).map(escapeArg)].join(' ').trim(),
         banner: false,
         // we always run in cwd, not --prefix
         path: process.cwd(),