THREATOPS
THREAT OPSThreat News › Sponsored: What npm 12 fixes… and what it doesn’t

Sponsored: What npm 12 fixes… and what it doesn’t

lowriskybiz_newsPublished 2026-08-16

<p>In this Risky Business sponsored interview, Casey Ellis chats with Socket founder Feross Aboukhadijeh about npm 12’s move to disable install scripts by default. Attackers are already shifting payloads into package source code, and Feross explains why teams need to understand what third-party code actually does before allowing it into their environments.</p>

Original source: https://risky.biz/RBNEWSSI140/