Blocking malicious npm packages before and during installation

T1Covered by 1 source · first reported by Vercel (blog + changelog) at 02 Nov, 00:00 UTC

builds Vercel now checks for blocked npm packages before and during dependency installation in, helping prevent malicious install scripts from running. The checks use a blocklist of specific package versions selected for blocking because of malware or security vulnerabilities, with new rules…