2026年10月29日 6:26 ET 发布 · 更新于 16 天前 · 1 个来源
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
The Hacker News
·
原始报道
INFERY
GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. "The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate," GitHub said. The feature, which currently supports only npm packages, is available in public preview
原文