NewsThe Hacker News
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
More on GitHub
Other advisories
- Not ratedosv:CVE-2026-118762Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-63209CVE-2026-63209 in github.com/klauspost/compress - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-GHSA-h7wr-284f-5qvcGHSA-h7wr-284f-5qvc in github.com/labstack/echo/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-GHSA-f48p-c9v4-h7xvGHSA-f48p-c9v4-h7xv in github.com/labstack/echo/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-GHSA-cxf3-9h37-7rr8GHSA-cxf3-9h37-7rr8 in github.com/labstack/echo/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-GHSA-9969-6676-49h5GHSA-9969-6676-49h5 in github.com/labstack/echo/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-53492CVE-2026-53492 in github.com/containerd/containerd/v2 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-53714CVE-2026-53714 in github.com/envoyproxy/gateway - Patched by Root
Other news entries
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto MinersNewsThe Hacker News
- Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hourNewsThe Register — Security
- Gut getarnt: Automatisch startender Wurm bei GitHub ist schwer zu findenNewsheise Security
- GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHubNewsDark Reading
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
- Attackers compromised 42 GitHub repositories by using files too large to be searchedNewsCSO Online
- Worm armed 42 GitHub repos by hiding a payload too big to failNewsThe Register — Security
Source: https://thehackernews.com/2026/10/github-launches-npm-firewall-to-block.html
ID