GitHub has resolved numerous vulnerabilities in Node.js packages tar and @npmcli/arborist, with the worst allowing file overwrites and arbitrary code execution.

Code repository GitHub has been partially unblocked in China after access to the site was completely restricted earlier this week.