GitHub’s npm package firewall can block brand-new versions before they install

October 28, 2026 · 5:09 pm 1 sources

Image: Help Net Security

Coverage

Coverage

• GitHub’s npm package firewall can block brand-new versions before they install
  Help Net Security · October 28, 2026 17:09
  GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall. The checks run before a package reaches a…