diff --git a/packages/core/test/preload.test.ts b/packages/core/test/preload.test.ts
index cca2d7a2ffc..33595e11c4c 100644
--- a/packages/core/test/preload.test.ts
+++ b/packages/core/test/preload.test.ts
@@ -4,6 +4,10 @@ import path from "path"
 import { Global } from "@opencode-ai/util/global"
 
 describe("Core test environment", () => {
+  test("disables public npm security audits", () => {
+    expect(process.env.NPM_CONFIG_AUDIT).toBe("false")
+  })
+
   test("isolates global home and XDG roots", () => {
     const home = process.env.OPENCODE_TEST_HOME
     expect(home).toBeDefined()
diff --git a/packages/core/test/preload.ts b/packages/core/test/preload.ts
index 8a7fd8ca7f2..b6edfaf163c 100644
--- a/packages/core/test/preload.ts
+++ b/packages/core/test/preload.ts
@@ -1 +1,2 @@
 process.env.OPENCODE_DB = ":memory:"
+process.env.NPM_CONFIG_AUDIT = "false"