GitHub Launches npm Firewall to Block Malicious Packages Before Installation

T2Covered by 1 source · first reported by The Hacker News at 29 Oct, 10:26 UTC

GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. "The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate,"…