As cited
Copy frozen at (site build).
vulnerabilities
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
npm version 12 disables install scripts by default to mitigate supply chain attacks, and deprecates granular access tokens that could bypass two-factor authentication. These changes shift security-sensitive operations from automatic execution to opt-in workflows, requiring developers to explicitly enable script execution during package installation.
Why it matters: JavaScript developers and DevOps teams using npm must update their CI/CD and local build processes to accommodate the new default, as package installations will no longer automatically run scripts that some dependencies may require.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
npm version 12 disables install scripts by default to mitigate supply chain attacks, and deprecates granular access tokens that could bypass two-factor authentication. These changes shift security-sensitive operations from automatic execution to opt-in workflows, requiring developers to explicitly enable script execution during package installation.
Why it matters: JavaScript developers and DevOps teams using npm must update their CI/CD and local build processes to accommodate the new default, as package installations will no longer automatically run scripts that some dependencies may require.
- Source published
- First seen by Cybersecurity Tracker