NewsThe Hacker News
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
More on Disables
Other advisories
- Not ratedosv:CVE-2026-85032Use-after-free in the MCTP over USB binding when the host disables the class while RX parsing is in progress
- Not ratedosv:CVE-2026-115216Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials
- Not ratedosv:GHSA-q54r-jf2p-rfr2gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
- Highghsa:GHSA-q54r-jf2p-rfr2gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
- Not ratedosv:CVE-2026-65825OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants
- Not ratedosv:CVE-2026-94135Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default
- Not ratedosv:CVE-2026-94134Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default
- MediumCVE-2026-85086Apache Thrift: Perl TLS client disables certificate verification by default
Other news entries
- Shadowy AI Relay Disables OpenAI Codex, Claude Code SandboxesNewsDark Reading
- ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPsNewsDark Reading
- Z.ai disables coding assistant feature after flaw exposed enterprise code upload riskNewsCSO Online
- Arch Linux disables AUR package adoption to stop malware floodNewsBleepingComputer
- Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer DataNewsThe Hacker News
- Maine Disables Data Breach Portal Due to Fake SubmissionsNewsSecurityWeek
- Maine disables data breach notification portal after fake disclosuresNewsBleepingComputer
- GitHub disables Microsoft repos pushing password-stealing malwareNewsBleepingComputer
Source: https://thehackernews.com/2026/07/npm-12-disables-install-scripts-by.html
ID