GitHub Launches npm Firewall to Block Malicious Packages Before Installation

GitHub has introduced a new package firewall as a preview to prevent the installation of suspicious npm packages. The firewall checks for signs of malicious activity by inspecting metadata requests and package downloads. This feature acts as a policy gate during installation, blocking potentially harmful packages. Currently, the firewall only supports npm packages and is available for public preview. The goal is to stop malicious packages before they are installed.