# What changed in @metamask/phishing-warning

> 15 changes in @metamask/phishing-warning 2 to 6 from its official release notes, upgrade guides and advisories: 8 breaking. Each one cited. Sources checked 2026-11-05. HTML: https://unstale.sh/npm/@metamask/phishing-warning/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @metamask/phishing-warning 6

### Breaking changes

- The minimum Node version is now 22, with support for Node 22, 24, and 26+. (6.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v6.0.0)

### Behavior and default changes

- The default font changed from CentraNo1 to Geist. (5.1.1, 6.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v6.0.0), [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v5.1.1)

### Fixes and other changes

- The phishing warning page favicon now matches the new MetaMask brand. (6.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v6.0.0)
- The phishing warning page's X sharing link now uses the current MetaMask domain. (6.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v6.0.0)

## @metamask/phishing-warning 5

### Breaking changes

- The data: protocol is now disallowed alongside javascript:. (5.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v5.0.0)
- The vbscript: protocol is now disallowed alongside javascript:. (5.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v5.0.0)

### Fixes and other changes

- The X share link was updated. (5.1.1) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v5.1.1)
- The MetaMask phishing image was updated. (5.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v5.0.0)

## @metamask/phishing-warning 4

### Breaking changes

- phishingSafelistStream now sends origin instead of hostname as a parameter to safelistPhishingDomain. (4.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v4.0.0)

## @metamask/phishing-warning 3

### Breaking changes

- The minimum supported Node.js version is now 16. (3.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v3.0.0)
- This package now returns streams conforming to the API of readable-stream@3.x. (3.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v3.0.0)

## @metamask/phishing-warning 2

### Breaking changes

- The query parameter is no longer accepted; the page looks up the source of a block dynamically instead. (2.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v2.0.0)
- The page no longer shows which project is responsible for the block; this will return in a future version. (2.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v2.0.0)

### Behavior and default changes

- The page now looks up the source of a block dynamically. (2.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v2.0.0)

### Fixes and other changes

- The phishing warning page was redesigned. (2.0.0) — [release notes](https://github.com/MetaMask/phishing-warning/releases/tag/v2.0.0)