npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
- Posted on July 9, 2026
- By The Hacker News
- 0 Views
- 1 min read
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
GitHub releases npm 12 with install scripts off by default and begins phasing out 2FA bypass tokens for sensitive npm actions.
