GitHub Launches npm Firewall to Block Malicious Packages Before Installation

GitHub has launched a preview of its npm Firewall for GitHub Enterprise Cloud, designed to block suspicious npm packages during installation by enforcing security policies and checking against malware advisories. The firewall inspects package metadata and downloads to prevent malware risks, especially from automated AI agents and CI runners installing dependencies.