14 min read
npm fixed install scripts in July, and 24 Node releases later yours still runs them
npm 12 blocked dependency install scripts by default on 8 July 2026. No Node.js release bundles it, so the default on your machine still runs everything.
- Supply chain
- Security
- Vulnerabilities