NewsThe Hacker News
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
More on GitHub
Other advisories
- Not ratedosv:CLEANSTART-2026-NH89673package github
- Not ratedosv:CLEANSTART-2026-SY25766Memory-safety vulnerability in github
- Not ratedosv:CLEANSTART-2026-XG38692denial-of-service vulnerability exists in github
- Not ratedosv:CLEANSTART-2026-OP23814Versions of the package github
- Not ratedosv:CVE-2026-119290Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run
- Not ratedosv:CVE-2026-119289Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate
- Not ratedosv:CLEANSTART-2026-NF99706Impact: The fix for CVE-2021-23337 (https://github
- Not ratedosv:CLEANSTART-2026-IT32325flaw was found in github
Other news entries
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto MinersNewsThe Hacker News
- Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hourNewsThe Register — Security
- Gut getarnt: Automatisch startender Wurm bei GitHub ist schwer zu findenNewsheise Security
- GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHubNewsDark Reading
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
- Attackers compromised 42 GitHub repositories by using files too large to be searchedNewsCSO Online
- Worm armed 42 GitHub repos by hiding a payload too big to failNewsThe Register — Security
Source: https://thehackernews.com/2026/10/github-launches-npm-firewall-to-block.html
ID