GitHub Launches npm Firewall to Block Malicious Packages Before Installation

GitHub has announced that its introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time The firewall inspects both metadata requests and package downloads for signs of malicious activity acting as an installtime policy gate GitHub said The feature which currently supports only npm packages is available in public preview