GitHub to disable npm install scripts by default to prevent supply chain attacks

GitHub is introducing significant security changes in npm version 12 to mitigate risks associated with software supply chain attacks. The update will disable the automatic execution of lifecycle scripts during the package installation process by default. This…