diff --git a/.npmrc b/.npmrc
new file mode 100644
index 000000000..fdd3e982e
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,4 @@
+# Disable automatic execution of install scripts for security
+# This protects against supply chain attacks that use postinstall hooks
+# If a package needs its install script, run: npm install --ignore-scripts=false <package>
+ignore-scripts=true