--- title: GitHub package firewall in public preview | daily.dev description: GitHub has launched a package firewall in public preview to stem credential-harvesting malware attacks that exploit systems at package installation time,... canonical: https://daily.dev/posts/github-package-firewall-in-public-preview-xiaunivjh twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: GitHub package firewall in public preview | daily.dev og:description: GitHub has launched a package firewall in public preview to stem credential-harvesting malware attacks that exploit systems at package installation time,... og:url: https://daily.dev/posts/github-package-firewall-in-public-preview-xiaunivjh og:image: https://api.daily.dev/og/posts/XIAuniVjH.png og:image:alt: GitHub package firewall in public preview og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GitHub package firewall in public preview **[GitHub Changelog](https://daily.dev/sources/github_updates)** · 2 min read · 1 upvotes · 0 comments ## Summary GitHub has launched a package firewall in public preview to stem credential-harvesting malware attacks that exploit systems at package installation time, before any code runs. It sits between endpoints like Actions runners or coding agents and upstream package registries, inspecting metadata requests and downloads. Policy controls include a configurable cooldown period, checks against the GitHub Advisory Database, and supply-chain checks like attestation downgrades. It's free during preview, will later be billed on metered usage like Actions, and currently supports only npm packages. It's available to all GitHub Enterprise Cloud customers, including data-resident instances. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is GitHub's package firewall and what does it protect against? It's a public preview feature that sits between endpoints like Actions runners or coding agents and upstream package registries, inspecting metadata requests and downloads for malicious activity. It targets attacks that harvest credentials at install time without running the package's code. Policy controls include a cooldown period, GitHub Advisory Database checks, and supply-chain checks like attestation downgrades. _Teams hardening CI/CD against install-time malware can track rollouts like this one on daily.dev._ ### Which package registries does GitHub's package firewall support? It currently only supports npm packages. The firewall is available in public preview for all GitHub Enterprise Cloud customers, including data-resident GitHub Enterprise Cloud, as GitHub scales up infrastructure and adds features based on customer demand. _Developers picking supply-chain tools can follow npm-focused security coverage on daily.dev._ ### How much does GitHub's package firewall cost during its preview period? It is free while in public preview. Once it reaches general availability, GitHub will charge based on metered usage, similar to how Actions billing works. _Engineers budgeting for supply-chain security tooling can watch pricing updates on daily.dev._ ## Similar posts on daily.dev - [Dependency Firewall: Block risky packages before the build](https://daily.dev/posts/dependency-firewall-block-risky-packages-before-the-build-s4en4pqa6) · GitLab · 0 upvotes · 0 comments - [Veracode Extends Package Firewall Reach to Microsoft Artifacts](https://daily.dev/posts/veracode-extends-package-firewall-reach-to-microsoft-artifacts-md4ylsgti) · DevOps.com · 0 upvotes · 0 comments - [Control Which Package Registries Your CI Jobs and Developer Machines Use](https://daily.dev/posts/control-which-package-registries-your-ci-jobs-and-developer-machines-use-y0r7fyrhi) · StepSecurity · 0 upvotes · 0 comments - [npm publish-time malware scanning and dual-use metadata](https://daily.dev/posts/npm-publish-time-malware-scanning-and-dual-use-metadata-hzy6qcztw) · GitHub Changelog · 8 upvotes · 3 comments - [Chainguard has a fix for the open source packages your AI agents keep grabbing](https://daily.dev/posts/chainguard-has-a-fix-for-the-open-source-packages-your-ai-agents-keep-grabbing-5olbm79br) · The New Stack · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#github](https://daily.dev/tags/github), [#cicd](https://daily.dev/tags/cicd), [#malware](https://daily.dev/tags/malware), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/github-package-firewall-in-public-preview-xiaunivjh) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"GitHub package firewall in public preview","url":"https://daily.dev/posts/github-package-firewall-in-public-preview-xiaunivjh","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/github-package-firewall-in-public-preview-xiaunivjh"},"datePublished":"2026-10-20T17:01:41.546Z","dateModified":"2026-10-20T17:08:50.246Z","description":"GitHub has launched a package firewall in public preview to stem credential-harvesting malware attacks that exploit systems at package installation time,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7735db8b1d3c10485dd8b7564d5a74bb?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7735db8b1d3c10485dd8b7564d5a74bb?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"GitHub Changelog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"GitHub Changelog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/15004b7835da4d89b02b115871f0f6dc","url":"https://daily.dev/sources/github_updates"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/github-package-firewall-in-public-preview-xiaunivjh","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,github,cicd,malware,npm","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"GitHub Changelog","item":"https://daily.dev/sources/github_updates"},{"@type":"ListItem","position":3,"name":"GitHub package firewall in public preview"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/github-package-firewall-in-public-preview-xiaunivjh#faq","mainEntity":[{"@type":"Question","name":"What is GitHub's package firewall and what does it protect against?","acceptedAnswer":{"@type":"Answer","text":"It's a public preview feature that sits between endpoints like Actions runners or coding agents and upstream package registries, inspecting metadata requests and downloads for malicious activity. It targets attacks that harvest credentials at install time without running the package's code. Policy controls include a cooldown period, GitHub Advisory Database checks, and supply-chain checks like attestation downgrades. Teams hardening CI/CD against install-time malware can track rollouts like this one on daily.dev."}},{"@type":"Question","name":"Which package registries does GitHub's package firewall support?","acceptedAnswer":{"@type":"Answer","text":"It currently only supports npm packages. The firewall is available in public preview for all GitHub Enterprise Cloud customers, including data-resident GitHub Enterprise Cloud, as GitHub scales up infrastructure and adds features based on customer demand. Developers picking supply-chain tools can follow npm-focused security coverage on daily.dev."}},{"@type":"Question","name":"How much does GitHub's package firewall cost during its preview period?","acceptedAnswer":{"@type":"Answer","text":"It is free while in public preview. Once it reaches general availability, GitHub will charge based on metered usage, similar to how Actions billing works. Engineers budgeting for supply-chain security tooling can watch pricing updates on daily.dev."}}]} ```