安全攻防 morning

npm 添加了针对供应链攻击的 2FA 门控发布和包安装控制

摘要

GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the ability to explicitly approve a release prior to the packages becoming publicly

the for npm approve available

2026-05-23 1 阅读 约1分钟阅读 info@thehackernews.com (The Hacker News)