# GitHub opens npm package firewall preview to enterprise cloud customers

_Published Thursday, October 29, 2026 at 10:00 AM EDT · Security · Latest · Tier 2 — Notable_

GitHub has made a package firewall available in public preview to all GitHub Enterprise Cloud customers, including those using data residency. The company says it can block suspicious npm packages before installation.

Administrators route package requests through the firewall, which checks downloads against policies covering malware advisories, vulnerability severity, package age, attestations and newly introduced installation scripts. Developers can request exceptions for administrators or security managers to approve.

The preview supports only npm packages. Its package age control defaults to a one-day wait and can be disabled. Waiting periods also delay legitimate fixes, and malicious releases can outlast the wait if they escape detection.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/github-launches-npm-firewall-to-block.html)

---
Canonical: https://techandbusiness.org/newswire/pbT8Qjvi0gSsBAdtrRa8Cj
Published: 2026-10-29T14:00:27.785Z
Story chronology: 2026-10-29T10:26:00.000Z
Retrieved: 2026-10-29T17:00:38.512Z
Publisher: Tech & Business (techandbusiness.org)