Cybersecurity · 1 views

npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk

GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular a…

Source The Hacker News AI Summary Updated 2h 17m ago

Story intelligence Beta

Freshness Fresh Updated 2h 17m ago

Confidence Limited Single-outlet story

Coverage Single outlet

Views 1 Community interest

Read time 1 min ~51 words

AI Summary

GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-factor authentication (2FA). The Microsoft-owned subsidiary noted that the following npm install behaviors that used to run automatically before have been made opt-in - allow…

Read full article on The Hackernews

AI summaries can be wrong sometimes—always verify important details using the source article.