GitHub's new npm package firewall blocks downloads based on malware advisories, vulnerabilities, attestations, install ...