## GitHub Launches npm Firewall to Block Malicious Packages Before Installation

- 種別: news
- 関連技術: nodejs, github
- 公開日時: 2026-10-29T10:26:33.000Z
- 情報源: The Hacker News (https://thehackernews.com/2026/10/github-launches-npm-firewall-to-block.html)
- パーマリンク: https://vulnpulse.app/items/thehackernews-193f5a35878b

GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. "The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate," GitHub said. The feature, which currently supports only npm packages, is available in public preview