GitHub Launches npm Firewall to Block Malicious Packages Before Installation
GitHub's new npm package firewall blocks downloads based on malware advisories, vulnerabilities, attestations, install scripts, and package age.
More info