GitHub Launches npm Firewall to Block Malicious Packages Before Installation
· thehackernews.com · popularity 19/100 · 0 similar stories today · Open Source & Developer Tools (Technology & Consumer Electronics)
Read the original at thehackernews.com →
Summary
GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. "The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate," GitHub said. The feature, which currently supports only npm packages, is available in public preview
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 8.