GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks
The Hacker News·
Originalartikel lesen bei The Hacker NewsGitHub has announced what it said are "breaking changes" coming to npm version 12, one of which turns off install scripts by default to combat software supply chain threats. The changes aim to combat attack techniques that abuse the "npm install" command to trigger the execution of malicious code...
MITRE ATT&CK Kill Chain (1 Techniken)
Reconnaissance