A malicious host can easily configure their proxy to steal login credentials. If you log into your through a compromised proxy, the host can capture your username and password for future use, leading to identity theft or account takeovers.
npm start