importantSYS.SOURCE: thehackernews.com• 2026-10-29T15:56:33+05:30

GitHub Introduces npm Package Firewall for Real-Time Malicious Activity Detection

#npm #security #malware #policy

GitHub has introduced a package firewall in public preview to block suspicious npm packages during installation by analyzing metadata and downloads for malicious activity. The feature currently supports only npm packages and acts as an install-time policy gate.

GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time.

"The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate," GitHub said.

The feature, which currently supports only npm packages, is available in public preview

Read original article

*** END OF TRANSMISSION ***

> US BATTERY STORAGE CAPACITY SURPASSES 20.2 GWH IN Q2 2026, SETTING NEW RECORD > CISCO ADDRESSES ACTIVELY EXPLOITED VULNERABILITY IN ASA AND FTD VPN SOFTWARE > GITHUB INTRODUCES NPM PACKAGE FIREWALL FOR REAL-TIME MALICIOUS ACTIVITY DETECTION > CRITICAL GITLAB VULNERABILITY CVE-2026-97229 EXPLOIT ATTEMPTED ON ALPINE LINUX'S SERVER > SPAIN HIGH-SPEED TRAIN COLLISION RESULTS IN DOZENS OF FATALITIES > CISCO SD-WAN VULNERABILITY EXPLOITED BY HACKERS TO DEPLOY KEYDRIFT MALWARE FOR ENCRYPTION KEY THEFT > CUBA EXTENDS DAYLIGHT SAVING TIME UNTIL 2027, SKIPPING 2026 CLOCK ADJUSTMENT > ZERO-CLICK REMOTE DOS VULNERABILITY IN ANDROID TELEPHONY VIA MALFORMED WAP PUSH SMS > EXPLOITING LOGIC BUGS TO CREATE A MICROSOFT EDGE FULL CHAIN ESCAPE > CHINA-NEXUS THREAT ACTOR EXPLOITS VMWARE ESX ZERO-DAY VULNERABILITY TO EVASION AUDIT TRAILS> US BATTERY STORAGE CAPACITY SURPASSES 20.2 GWH IN Q2 2026, SETTING NEW RECORD > CISCO ADDRESSES ACTIVELY EXPLOITED VULNERABILITY IN ASA AND FTD VPN SOFTWARE > GITHUB INTRODUCES NPM PACKAGE FIREWALL FOR REAL-TIME MALICIOUS ACTIVITY DETECTION > CRITICAL GITLAB VULNERABILITY CVE-2026-97229 EXPLOIT ATTEMPTED ON ALPINE LINUX'S SERVER > SPAIN HIGH-SPEED TRAIN COLLISION RESULTS IN DOZENS OF FATALITIES > CISCO SD-WAN VULNERABILITY EXPLOITED BY HACKERS TO DEPLOY KEYDRIFT MALWARE FOR ENCRYPTION KEY THEFT > CUBA EXTENDS DAYLIGHT SAVING TIME UNTIL 2027, SKIPPING 2026 CLOCK ADJUSTMENT > ZERO-CLICK REMOTE DOS VULNERABILITY IN ANDROID TELEPHONY VIA MALFORMED WAP PUSH SMS > EXPLOITING LOGIC BUGS TO CREATE A MICROSOFT EDGE FULL CHAIN ESCAPE > CHINA-NEXUS THREAT ACTOR EXPLOITS VMWARE ESX ZERO-DAY VULNERABILITY TO EVASION AUDIT TRAILS