Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

GitHub is finally tightening up security around npm following multiple attacks

GitHub NPM
GitHub Webpage.
  • GitHub will enforce 2FA and deprecate legacy tokens to improve package publishing security
  • Trusted Publishing will expand, and token-based publishing will be restricted by default
  • Shai-Hulud worm breached npm, prompting removal of over 500 compromised packages

Following a number of recent high-profile attacks and hacking attempts, GitHub has decided to make substantial changes to the security of its platform.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Does your sleep tracker get it right? A Pittsburgh neuroscientist weighs in
On a typical night, I go to bed wearing a tracking watch on one wrist and another type of tracker on the other wrist. Then I compare their sleep findings while I drink my morning coffee.
The Conversation
The Conversation
There's A Reason Taxi Cabs Are Almost Always Yellow
Yellow taxis are easy to spot in traffic, but the color's history goes far beyond simple visibility.
Motor1
Motor1
How ‘technoference’ can disrupt parent-child connections
Have you ever been telling someone a story when their phone lights up, and their eyes flicker toward their device?
The Conversation
The Conversation
Holding Lightning by Emily Lordi review – an intimate portrait of Whitney Houston
An empathetic biography of the the singer recasts her tumultuous later career as a triumph of self-expression
The Guardian - UK
The Guardian - UK
Brian May says Queen are retiring from live tours: ‘Maybe 50 years is enough’
Rock guitarist suggested creating an interactive experience for fans similar to the ‘Abba Voyage’ show
The Independent UK
The Independent UK
"Lanterns" finds its power in fear
To fulfill his destiny, John Stewart embraces what he was trained to reject — and so should we
Salon
Salon
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.
Download on the AppStore Get it on Google Play