Skip to content

Back to the catalog

JFrog: Coding Agents Just Reopened Your Software Supply Chain Blind Spot
jfrog.comarticle

JFrog: Coding Agents Just Reopened Your Software Supply Chain Blind Spot

JFrog describes how AI coding agents like Cursor and Claude Code autonomously select and download dependencies directly from public registries (npm, PyPI, Maven, Go, Docker Hub, Helm, NuGet), bypassing organizational curation, scanning, and audit controls entirely. It cites JFrog's 2026 State of the Union data (451% surge in malicious npm packages, ~20% of AI package recommendations referencing non-existent "slopsquatted" packages) and announces Agent Package Resolution, a JFrog Artifactory feature that transparently routes agent-driven package installs through existing curation/Xray scanning policies via session steering, persistent package-manager config, and server-side enforcement.

TL;DR AI coding agents bypass software supply-chain controls by pulling packages straight from public registries; JFrog's new Agent Package Resolution forces those installs through existing Artifactory curation/scanning.
Open original ↗

Technologies named here

  • Cursor
  • Claude Code
  • npm
  • Artifactory
  • PyPI
  • JFrog Curation
  • Xray
  • Maven
  • Go
  • Docker Hub
  • Helm
  • NuGet
  • JFrog Artifactory
  • JFrog Xray
  • Agent Package Resolution
  • JFrog Agent Plugin
  • jf setup

Techniques named here

  • Slopsquatting
  • Server-side curation enforcement
  • Session steering

Concepts named here

  • Governance parity
  • Governed path
  • Independent enforcement layers
  • Software supply chain blind spot

Threat actors named here

  • slopsquatting
  • Malicious npm package activity (surged 451% in 2025, more than 171,000 unique malicious packages, per JFrog Software Supply Chain Security State of the Union 2026 report)

Related in Supply Chain