# GitHub’s npm package firewall can block brand-new versions before they install

> Source: <https://www.helpnetsecurity.com/2026/10/28/github-package-firewall-npm/>
> Published: 2026-10-28 17:09:14+00:00

GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall. The checks run before a package reaches a laptop, a build, or a coding agent. GitHub says AI agents are helping developers build more software, faster, and the firewall is one of four security additions aimed at … [More](https://www.helpnetsecurity.com/2026/10/28/github-package-firewall-npm/) 

The post [GitHub’s npm package firewall can block brand-new versions before they install](https://www.helpnetsecurity.com/2026/10/28/github-package-firewall-npm/) appeared first on [Help Net Security](https://www.helpnetsecurity.com).