diff --git a/.npmrc b/.npmrc
index b6f27f135954..68281b7d8a02 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1 +1,9 @@
 engine-strict=true
+
+# Supply chain protection: only install package versions published at least 7 days ago.
+# Bypass for a single install with --min-release-age=0, or add trusted packages below.
+min-release-age=7
+min-release-age-exclude[]=@expensify/*
+min-release-age-exclude[]=expensify-common
+min-release-age-exclude[]=react-native-onyx
+min-release-age-exclude[]=eslint-config-expensify
diff --git a/Mobile-Expensify b/Mobile-Expensify
index b6b55c09f08a..7656fc84c31d 160000
--- a/Mobile-Expensify
+++ b/Mobile-Expensify
@@ -1 +1 @@
-Subproject commit b6b55c09f08ab5818863f800aba9ebe012a4cb5e
+Subproject commit 7656fc84c31d199a379f1b69e95cacd51d1c28fb