GitHub Launches npm Firewall to Block Malicious Packages Before Installation

GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. "The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate," GitHub said. The feature, which currently supports only npm packages, is available in public preview

在 The Hacker News 阅读

2026/10/29 19:26，The Hacker News 发布了“GitHub Launches npm Firewall to Block Malicious Packages Before Installation”（类型：安全新闻）。相关技术：JavaScript / Node.js、GitHub。