In response to recent software supply chain attacks, NPM version 12 is blocking the automatic script execution at install.
With npm v12, GitHub closes a central attack vector: installation scripts from dependencies will only run after explicit ...
The change, expected in July, will likely block one of the more common attack vectors; developers are wondering what took ...