THREAT OPS › Threat News › Update to npm blocks install scripts: What it means for AppSec
Update to npm blocks install scripts: What it means for AppSec
Disabling scripts by default closes the vector worms like Shai-Hulud rely on. Here's what the update fixes — and what it doesn't.
Original source: https://www.reversinglabs.com/blog/npm-v12-blocks-install-scripts