GitHub Launches npm Firewall to Block Malicious Packages Before Installation

GitHub introduced a package firewall preview that blocks installation of suspicious npm packages during installation time. The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate. The feature currently supports only npm packages and is available in public preview.