diff --git a/packages/core/test/preload.test.ts b/packages/core/test/preload.test.ts
new file mode 100644
index 00000000000..cd313078864
--- /dev/null
+++ b/packages/core/test/preload.test.ts
@@ -0,0 +1,5 @@
+import { expect, test } from "bun:test"
+
+test("disables public npm security audits", () => {
+  expect(process.env.NPM_CONFIG_AUDIT).toBe("false")
+})
diff --git a/packages/core/test/preload.ts b/packages/core/test/preload.ts
index 39b237d70a4..7a2a3d2bd24 100644
--- a/packages/core/test/preload.ts
+++ b/packages/core/test/preload.ts
@@ -1,5 +1,6 @@
 import path from "path"
 
 process.env.OPENCODE_DB = ":memory:"
+process.env.NPM_CONFIG_AUDIT = "false"
 process.env.OPENCODE_MODELS_PATH = path.join(import.meta.dir, "plugin", "fixtures", "models-dev.json")
 process.env.OPENCODE_DISABLE_MODELS_FETCH = "true"