[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"post:package-security-without-starting-on-the-laptop":3},{"post":4,"author":19,"controls":26,"vendors":39,"more":52},{"slug":5,"kind":6,"title":7,"excerpt":8,"cover_image_url":9,"cover_image_alt":10,"author_name":11,"published_at":12,"body_md":13,"author_title":14,"regulation_refs":15,"ai_assisted":16,"cover_ai_generated":16,"updated_at":17,"reading_minutes":18},"package-security-without-starting-on-the-laptop","analysis","Package security in three steps, and why you do not have to start on the laptop","AI coding agents now pick and install packages on engineering machines in seconds, and few teams can say what was pulled in. A threat feed you can search this week, a registry firewall that fits the network you already run, and the endpoint last. Notes from a session with Socket.","https:\u002F\u002Fzbqafrnxsxwbarztrtqp.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fresources\u002Fblog\u002Fai-1cc0747e-9558-4214-a9a4-10cae453ca38.png","A digital shield protects a data stream from threats, representing layered package security.","Marcus Lenngren","2026-10-31T07:07:36.208+00:00","What worries me most about software supply chain attacks right now is how little we know about what actually lands on our engineers' machines.\n\nA developer used to pick a package, read the README and maybe check who maintains it. Today an AI coding agent decides it needs a library, picks one, installs it and runs it, often in seconds and often without anyone reading the name. Researchers have shown that models sometimes invent package names that do not exist, and anyone can register those names. Meanwhile malicious packages built to steal credentials appear on npm and PyPI every week, and the engineering box is exactly where the access to source code, cloud accounts and production lives.\n\nSo the question I keep coming back to is practical: how do we see, and control, what gets pulled onto those machines? Most answers begin with \"install an agent on every developer laptop\". That is a good end state, and a hard first step. It means a rollout, a pilot group, exceptions for build servers, and a few weeks before anything is protected.\n\nThis week I spent time with Socket, and what stayed with me was not a feature. It was the order you can do things in. You do not have to start on the endpoint.\n\n## Why this kind of threat intelligence is different\n\nMost threat intelligence I use is about infrastructure: IP addresses, domains, file hashes, actors. It tells you who is attacking. It says very little about the npm package a developer installed this morning.\n\nSocket's threat feed is built the other way round. It lists malicious open source packages by ecosystem, name and version: malware, typosquats, packages that steal credentials at install time. Socket says it finds many of them within seconds of publication, using AI scanning followed by human review. That is the intelligence you need for the attacks we keep seeing against developers, and there are not many feeds like it. JFrog runs one, and the open source community maintains a free one through OpenSSF. Most traditional threat intelligence and IoC vendors do not cover packages at this level.\n\n## Three steps, in the order I would take them\n\n### 1. See what you already have, with nothing installed\n\nStart with the feed. Take the list of known bad package versions and search for them in what you already run: your repositories, your build logs, your software composition and vulnerability tools, your code search. Socket's dashboard also shows whether a campaign's packages appear in your connected repositories.\n\nThis takes days, not months, and it answers the first question anyone asks when a new campaign is announced: are we already affected?\n\n### 2. Control what comes in, at the network\n\nNext, put a firewall in front of the package registries. Socket Firewall's registry mode runs as a service between your package managers and the public registries: npm, PyPI, Maven, Cargo, RubyGems, NuGet, Go, Conda, OpenVSX for editor extensions, and Hugging Face model downloads. Developers and build servers point at it instead of the public registry. A known malicious package gets blocked with a clear message, and everything else passes through.\n\nTwo things make this step more valuable than it sounds.\n\n- **It fits the network you already have.** The firewall can sit behind your corporate egress proxy, so it works alongside a secure web gateway such as Zscaler. Nobody's laptop needs to change apart from a registry setting.\n- **It tells you what is actually used.** Every download is logged, including the ones an AI agent decided on by itself, so for the first time you see which packages, in which versions, really enter the company. That is an SBOM built from reality instead of from what a manifest claims, and it is a hunting dataset: when the next campaign is announced, you search your own download log instead of asking every team.\n\n### 3. Cover the machine itself\n\nThe last step is the developer's own machine, for the downloads that never touch your network or bypass the registry setting. Socket Firewall also runs locally as a wrapper around the package manager (`sfw npm install`). The free version needs no account and blocks confirmed malware for npm, yarn, pnpm, pip, uv and cargo, so any developer can start today. The enterprise version covers more ecosystems and reports to the dashboard.\n\nStart this step with the people who hold the most access: platform, DevOps, anyone who can reach production, and anyone who lets an AI agent install packages on their behalf.\n\n## What it does not solve\n\nA package firewall is one layer, not the whole answer. It does not stop a fake recruiter's take-home test that the developer runs by hand, a stolen session token, or a malicious editor extension installed from somewhere other than the registry you control. Those need [application allowlisting](\u002Fcontrols\u002Fapplication-allowlisting), short-lived credentials and an approval step outside the systems that move money or data.\n\nOther vendors in the [software supply chain](\u002Fcontrols\u002Fsoftware-supply-chain) category, such as Sonatype Firewall and JFrog Curation, also block packages at the registry. Compare them on how fast new malware reaches the block list, which ecosystems they cover, and what the logs give you.\n\n## Why I like this\n\nGood security tools usually make you choose between fast and thorough. This one lets you start where you are: a feed you can search this week, a proxy that fits the network you already run, and an agent when you are ready. Each step stands on its own, and each one makes the next easier.\n\nIf you know other threat feeds that track malicious packages at this level, I would like to hear about them.\n\n*Sources: Socket documentation on the [threat feed](https:\u002F\u002Fdocs.socket.dev\u002Fdocs\u002Fthreat-feed), [Socket Firewall](https:\u002F\u002Fdocs.socket.dev\u002Fdocs\u002Fsocket-firewall-overview), [registry mode](https:\u002F\u002Fdocs.socket.dev\u002Fdocs\u002Fsocket-firewall-enterprise-registry-mode) and the [free wrapper](https:\u002F\u002Fdocs.socket.dev\u002Fdocs\u002Fsocket-firewall-free).*",null,[],true,"2026-10-31T07:10:53.244884+00:00",4,{"name":11,"slug":20,"same_as":21,"job_title":22,"photo_url":23,"short_bio":24,"linkedin_url":25},"marcus-lenngren",[],"Founder, ThreatNoir","https:\u002F\u002Fzbqafrnxsxwbarztrtqp.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fresources\u002Fauthors\u002Fmarcus-lenngren-ca3a2dad9da5.jpg","Founder of ThreatNoir. Security and technology leader: CTO and CISO in a regulated industry, head of applications, network and data centre at Schibsted Sverige, and today security engineering for a global retailer's SOC. CISSP, CISM and AAISM.","https:\u002F\u002Fwww.linkedin.com\u002Fin\u002Fmarcuslenngren",[27,31,35],{"slug":28,"name":29,"problem":30},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",{"slug":32,"name":33,"problem":34},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":36,"name":37,"problem":38},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[40,44,48],{"slug":41,"name":42,"logo_path":43},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png",{"slug":45,"name":46,"logo_path":47},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png",{"slug":49,"name":50,"logo_path":51},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png",[53,62,69],{"slug":54,"kind":55,"title":56,"excerpt":57,"cover_image_url":58,"cover_image_alt":59,"author_name":11,"published_at":60,"reading_minutes":61},"artex-ai-autonomous-agents-run-active-directory-attacks-at","rapid-alert","ARTEX AI: autonomous agents run Active Directory attacks at machine speed against 200+ orgs","Chinese-linked actors are using the open-source ARTEX AI framework to automate Kerberoasting, DCSync and lateral movement. Google, Mandiant and CrowdStrike report attacks on over 200 organisations, with one breach reaching root in 12 minutes.","https:\u002F\u002Fzbqafrnxsxwbarztrtqp.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fresources\u002Frapid\u002Fartex-ai-autonomous-agents-run-active-directory-attacks-at-02704500-cover.png","ARTEX AI rapid alert: Still trust slow attacks to catch? A machine takes your domain in minutes","2026-11-03T04:23:57.557+00:00",3,{"slug":63,"kind":55,"title":64,"excerpt":65,"cover_image_url":66,"cover_image_alt":67,"author_name":11,"published_at":68,"reading_minutes":61},"xcpe-botnet-1-3m-android-tv-boxes-shipped-with-a-backdoor","XCPE botnet: 1.3M Android TV boxes shipped with a backdoor, Google and police disrupt it","Google, Japan's NPA and partners disrupted XCPE, a backdoor that OEM Videostrong allegedly built into Android TV box firmware, enrolling more than 1.3 million devices. Removing the app does not help: it reinstalls from a protected partition on reboot.","https:\u002F\u002Fzbqafrnxsxwbarztrtqp.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fresources\u002Frapid\u002Fxcpe-botnet-1-3m-android-tv-boxes-shipped-with-a-backdoor-305686fc-cover.png","XCPE botnet rapid alert: Bought a cheap Android TV box? The backdoor shipped inside it.","2026-11-03T04:18:31.219+00:00",{"slug":70,"kind":55,"title":71,"excerpt":72,"cover_image_url":73,"cover_image_alt":74,"author_name":11,"published_at":75,"reading_minutes":61},"coruna-and-darksword-zero-click-iphone-spyware-steals-data","Coruna and DarkSword: zero-click iPhone spyware steals data from a single web page visit","Two iPhone exploit kits, Coruna and DarkSword, infect phones from a single web page with no app and no prompt. Zimperium found 608 delivery domains. Apple has notified targeted users in 99 countries. Every CVE is already patched.","https:\u002F\u002Fzbqafrnxsxwbarztrtqp.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fresources\u002Frapid\u002Fcoruna-and-darksword-zero-click-iphone-spyware-steals-data-9c36ddb3-cover.png","Coruna\u002FDarkSword rapid alert: Your iPhone on iOS 17 or 18? One web page visit and it is theirs.","2026-11-01T05:36:03.059+00:00"]