THREATNOIR
Subscribe
Back to Feed
Supply ChainJul 8, 2026

pnpm 11.10 Hardens Registry Authentication to Block Token Redirection

pnpm 11.10 hardens registry authentication and tightens build commands.

Read at source

Summary

pnpm version 11.10 introduces significant supply chain security enhancements, primarily by overhauling registry authentication to prevent token redirection to malicious hosts. This update also strengthens build and packaging commands, and introduces an install path for the upcoming Rust-based pnpm v12.

Full text

Security News/ResearchCoordinated npm and PyPI Campaign Typosquats Popular Secure Payment AppsSocket uncovered 17 malicious npm and PyPI packages typosquatting Paysafe, Skrill, and Neteller SDKs to steal developer secrets.By Joseph Edwards - Jul 07, 2026

Entities

pnpm (product)npm (technology)