GitHub has released npm version 12, which significantly enhances supply chain security by disabling install scripts by default. This change makes automatic execution of install scripts an opt-in behavior, reducing the risk of malicious code injection during package installation. Additionally, granular access tokens (GATs) designed to bypass 2FA have been deprecated, further strengthening security measures.