GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks

GitHub announced changes to npm version 12 that will disable install scripts by default. The changes are intended to reduce software supply chain threats that abuse npm lifecycle hooks to execute malicious code.