diff --git a/local-npm-registry.changes b/local-npm-registry.changes
index bbeea8c..5705a64 100644
--- a/local-npm-registry.changes
+++ b/local-npm-registry.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Fri Dec 29 11:02:40 UTC 2023 - Adam Majer <adam.majer@suse.de>
+
+- Escape `quilt setup` invoked section in the helper script
+
 -------------------------------------------------------------------
 Fri Jul 21 12:59:44 UTC 2023 - Adam Majer <adam.majer@suse.de> 1.0.1
 
diff --git a/local-npm-registry.spec b/local-npm-registry.spec
index d8207d7..f7dc836 100644
--- a/local-npm-registry.spec
+++ b/local-npm-registry.spec
@@ -44,10 +44,10 @@ cp -r dist node_modules %{buildroot}%{_datadir}/%{name}
 cat > %{buildroot}%{_bindir}/local-npm-registry << EOF
 #!/bin/sh
 
-if [ "x$QUILT_COMMAND" = "xsetup" ]
+if [ "x\$QUILT_COMMAND" = "xsetup" ]
 then
         echo "Run in setup mode. 'npm install' skipped. Run 'npm ci' manually."
-        cp "$RPM_SOURCE_DIR/package-lock.json" .
+        cp "\$RPM_SOURCE_DIR/package-lock.json" .
         exit 0
 fi