It does not, since version 11: https://docs.npmjs.com/cli/v11/using-npm/changelo... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		VPenkov 7 months ago \| parent \| context \| favorite \| on: Shai-Hulud malware attack: Tinycolor and over 40 N... It does not, since version 11: https://docs.npmjs.com/cli/v11/using-npm/changelog#1100-pre0...

theodorejb 7 months ago [–]

Yes it does, since the ignore-scripts option is not enabled by default.

VPenkov 7 months ago | [–]

Yes it does, you're correct and I have misread. I can't edit, delete, or flag my initial reply unfortunately.

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact