GitHub Expands Supply Chain Malware Detection From npm to 8 Package Registries

GitHub has expanded its malware detection capabilities beyond npm, providing developers with broader protection against malicious open-source packages. Dependabot alerts can now identify harmful dependencies across 8 major package ecosystems: npm, PyPI, Maven, RubyGems, NuGet, Go, crates.io, and PHP Composer. A malicious package can steal passwords, API keys, cloud credentials, cryptocurrency wallets, and source code […] The post GitHub Expands Supply Chain Malware Detection From npm to 8 Package Registries appeared first on Cyber Security News.