Npm - 1

2026 (2)

March (1)

github: Dependabot now detects malware in npm dependencies

GitHub

2026-03-17

Dependabot can now alert on npm dependencies that match known malware advisories. When malware alerting is enabled, it checks repository npm dependencies against malicious package versions.

February (1)

github: npm bulk trusted publishing config and script security now generally available

GitHub

2026-02-18

npm CLI v11.10.0+ adds bulk management for OIDC trusted publishing configurations and makes a script security feature generally available.

2025 (5)

December (1)

github: npm classic tokens revoked, session-based auth and CLI token management now available

GitHub

2025-12-09

On 2025-12-09 GitHub completed the deprecation of npm classic tokens by revoking them and moving to session-based authentication. At the same time GitHub released CLI token management features so developers can manage authentication tokens from the command line. This change is part of a security hardening effort and requires affected users and automation to re-authenticate and adopt the new session-based flows or updated tokens.

November (1)

github: npm security update: Classic token creation disabled and granular token changes

GitHub

2025-11-05

GitHub announced an npm security update that disables creation of classic tokens and introduces the first changes toward a granular token management system to strengthen npm security.

October (2)

azure: Retirement: Azure Network Policy Manager (NPM) for Windows nodes on AKS to Be Retired by September 30, 2026

Azure Updates

2025-10-07

Microsoft will retire Azure Network Policy Manager (NPM) for Windows nodes on AKS on September 30, 2026. Customers must move to alternative networking solutions to keep receiving support, security updates, and deployment compatibility.

azure: Retirement: Azure Network Policy Manager (NPM) for Linux nodes on AKS to Be Retired by September 30, 2028

Azure Updates

2025-10-01

Azure will retire Azure Network Policy Manager (NPM) on Linux nodes in AKS on September 30, 2028. Customers must migrate AKS clusters using NPM to Cilium Network Policy before that date to avoid disruptions.

September (1)

github: Strengthening npm security: Important changes to authentication and token management

GitHub

2025-09-29

GitHub announced the first phase of security improvements for npm that change how authentication and token management work. The update is part of a staged rollout intended to harden the npm ecosystem and was posted on the GitHub Blog.