npm 12 now blocks install scripts by default, closing the lifecycle hook that fueled major supply chain attacks on developer ...