npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-factor authentication (2FA).
The Microsoft-owned subsidiary noted that the following npm install behaviors that used to run automatically before have been made opt-in –
allowScripts defaults to off, meaning
Source: The Hacker News
TS-2026-009: Insecure argument handling in Tailscale SSH permitted root access Source: Hacker News
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six
Watchtower Mittags-Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. a password is required — sudo: requests (recent log) Mehr Live-Daten und die komplette Historie im /attacks/ Watchtower-Bereich