Thursday, June 11, 2026 · Cyber news, in panels.
GitHub says npm v12 will stop dependency install scripts from running by default, reducing a major supply-chain code-execution path. Teams should review npm warnings now and approve only package scripts they truly trust.

npm v12 Locks Down Install Scripts

GitHub says npm v12 will stop dependency install scripts from running by default, reducing a major supply-chain code-execution path. Teams should review npm warnings now and approve only package scripts they truly trust.

Get tomorrow's comic in your inbox

One panel a day. No spam, unsubscribe with one click.