GitHub Launches npm Firewall to Block Malicious Packages Before Installation

GitHub has an­noun­ced that it's in­tro­du­cing a new pac­ka­ge fi­re­wall as a pre­view to block ins­ta­lla­tion of sus­pi­cious npm pac­ka­ges du­ring ins­ta­lla­tion time. "The fi­re­wall ins­pects both me­ta­da­ta re­quests and pac­ka­ge down­loads for signs of ma­li­cious ac­ti­vity, ac­ting as an ins­tall-time po­licy gate," GitHub said. The fea­tu­re, which cu­rrently sup­ports only npm pac­ka­ges, is avai­la­ble in pu­blic pre­view…