{
  "summary": "Known-malicious open-source packages are now blocked at download: the proxy checks requests to the npm, PyPI, crates.io, RubyGems, Go, Packagist, NuGet and Maven registries against the OSV malicious-package database, delivered through the license server and refreshed hourly, and answers with a block instead of the package. Every other package version a device downloads is recorded for 90 days, so when a package is flagged after it was already installed - the usual case, since malicious packages are typically reported only after wide distribution - the devices that pulled it raise an alert naming the package, advisory and download time. Because Node.js ignores the operating system's certificate store, npm, yarn and pnpm reject inspected TLS; the new Settings option \"Trust the inspection CA in Node.js\" makes agents on Linux, macOS and Windows set NODE_EXTRA_CA_CERTS machine-wide, leaving any value already set on the device untouched. A new signal flags developer runtimes (node, python, deno, bun and similar) talking to chat-bot APIs, webhook catchers, blockchain RPC endpoints, paste sites, tunnels or out-of-band testing services, or sending Ethereum JSON-RPC to any host - the command-and-control and exfiltration channels used by malicious packages that act only at runtime. It alerts by default, can be set to block or off with allowlists for destinations and processes, and always blocks traffic from processes started by a package manager (npm install, npm run, pip and others), including processes that detached from it. Both signals appear in the event log and can be routed to webhooks through the new \"Supply chain: malicious package / runtime egress\" alert type. OpenPhish phishing-URL blocking now also applies with full DLP inspection, where it previously only ran in headers mode. The automatic TLS-inspection bypass for hosts that reject the inspection certificate now applies per device, so one misconfigured client no longer switches off inspection of that host for every device. HTTP/2 clients no longer fail on inspected connections while DLP is off."
}