supply-chain
Imported story
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
Source: The Hacker News · Published · Last checked 15 minutes ago · 1 min read
Read original source ↗ (thehackernews.com)
Publisher excerpt From The Hacker News
GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. "The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate," GitHub said. The feature, which currently supports only npm packages, is available in public preview
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.