npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk

Home / Tech / npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk

npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk

July 9, 2026 dirk 0 Comments 3 tags

npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk

GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-factor authentication (2FA).

The Microsoft-owned subsidiary noted that the following npm install behaviors that used to run automatically before have been made opt-in –

allowScripts defaults to off, meaning

Source: The Hacker News

Explore More

New AI tutor achieves 0.71-1.30 SD effect size in Dartmouth course [pdf]

New AI tutor achieves 0.71-1.30 SD effect size in Dartmouth course [pdf] Source: Hacker News

U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case

U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case A U.S. government entity paid about $1 million to keep stolen files from being leaked, according to a new case

Nintendo has raised its employees base salary by 10%

Nintendo has raised its employees base salary by 10% Source: Hacker News