GitHub’s npm package firewall can block brand-new versions before they install

GitHub announced a package firewall that checks npm packages against an enterprise's policy before installation, blocking known malware, critical vulnerabilities, and brand-new versions; any developer can enable it by pointing npm at the firewall. The checks run before a package reaches a laptop, a build, or a coding agent, and GitHub says AI agents are helping developers build more software faster, with the firewall one of four security additions.

GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall. The checks run before a package reaches a laptop, a build, or a coding agent. GitHub says AI agents are helping developers build more software, faster, and the firewall is one of four security additions aimed at … More https://www.helpnetsecurity.com/2026/10/28/github-package-firewall-npm/ The post GitHub’s npm package firewall can block brand-new versions before they install https://www.helpnetsecurity.com/2026/10/28/github-package-firewall-npm/ appeared first on Help Net Security https://www.helpnetsecurity.com .