DossierENTITY

npm lifecycle hooks

Coverage of npm lifecycle hooks in the Nexus archive.

Earliest in view: Jun 11 · 06:23 UTCMost recent: Jun 11 · 06:23 UTC

Co-mentioned in this coverage

Recent coverage

SECURITYJun 11 · 06:23 UTCTHE HACKER NEWS
GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks
GitHub is introducing breaking changes in npm version 12 to disable install scripts by default, aiming to prevent supply chain attacks. The update targets malicious code execution via npm lifecycle hooks during the 'npm install' command.