Security News GitHub Launches npm Firewall to Block Malicious Packages Before Installation TheHackerNews Daniel Bender 29 Oct 2026 Share GitHub's new npm package firewall blocks downloads based on malware advisories, vulnerabilities, attestations, install scripts, and package age.