npm publish-time malware scanning and dual-use metadata - GitHub Changelog

https://github.blog/changelog/2026-07-28-npm-publish-time-malware-scanning-and-dual-use-metadata/