GitHub disrupts npm and Actions supply chain attacks

GitHub shipped a default three-day cooldown on npm version update pull requests to slow malware spread. An Actions network firewall technical preview logs outbound traffic to detect credential exfiltration. These changes target common attack techniques in package repositories and CI/CD systems.