pnpm 11.10 Hardens Registry Authentication to Block Token Redirection
pnpm 11.10 hardens registry authentication and tightens build commands.
Run pnpm?
Get an email when a reviewed story names pnpm, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works
Summary
pnpm version 11.10 introduces significant supply chain security enhancements, primarily by overhauling registry authentication to prevent token redirection to malicious hosts. This update also strengthens build and packaging commands, and introduces an install path for the upcoming Rust-based pnpm v12.
Full text
Security News/ResearchCoordinated npm and PyPI Campaign Typosquats Popular Secure Payment AppsSocket uncovered 17 malicious npm and PyPI packages typosquatting Paysafe, Skrill, and Neteller SDKs to steal developer secrets.By Joseph Edwards - Jul 07, 2026