Skip to content
securitytabs

GitHub’s npm package firewall can block brand-new versions before they install

Help Net SecurityAINetworkAppSec

MentionsGitHub

GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall. The checks run before a package reaches a laptop, a build, or a coding agent.

Summary from Help Net Security.

Read the full article at Help Net Security
Full story2 outlets are covering this story. Read the summary and every outlet's coverage

Explained

The technology and terms in this story. Learn more

Related coverage

Other sources covering the same vulnerabilities or event.

More in AI

GitHub’s npm package firewall can block brand-new versions before they install | SecurityTabs