Commit cb2138b

and

committed

Add .npmrc with ignore-scripts=true to block dependency install hooks

Prevents npm from auto-running dependency lifecycle scripts (preinstall/install/postinstall) on install, mitigating the Miasma/Shai-Hulud npm supply-chain worm class. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

1 parent a581abc commit cb2138bCopy full SHA for cb2138b

1 file changed

.npmrc

`‎.npmrc‎`

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+ignore-scripts=true`

Comments

(0)