Mitigation Guidance for Supply Chain Compromise | Google Cloud Blog
…Mitigate the critical threat of arbitrary code execution by disabling the automatic running of package install scripts. Attackers commonly hijack dependencies and add malicious post-installation execution scripts to steal credentials from…