Covered by 2 outlets — first reported by Help Net Security, Oct 28, 17:09 UTC
GitHub’s npm package firewall can block brand-new versions before they install
MentionsGitHub
Summary
GitHub has announced a package firewall, in public preview, that checks npm packages against an organization's policy before they are installed. Help Net Security says it blocks known malware, critical vulnerabilities and brand-new package versions, and that any developer can enable it by pointing npm at the firewall. The Hacker News reports it inspects both metadata requests and package downloads for signs of malicious activity, and currently supports only npm.
AI summary by the SecurityTabs newsroom, checked against Help Net Security, The Hacker News. Read the outlets below for the full story.
Continue reading
2 outlets, in the order they reported it.
Help Net SecurityFirst report
GitHub’s npm package firewall can block brand-new versions before they install
GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at…
The Hacker News
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time.
Explained
The technology and terms in this story. Learn more