🧰 Datadog Code Security

The items that name it 9

• Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder
  writeup2026-10-29

  Reports the vulnerable runtime in services with dependency inventories and identifies services to prioritize (Express 5, body-parser 2.x, Koa, auto-decoding HTTP clients).

• Code security for new coders
  article2026-10-26

  Datadog product offering SCA, SAST, IAST, IaC and Secret scanning

• LiteLLM supply chain compromise: What you need to know
  writeup2026-10-21

  Helps customers identify affected hosts, containers or build environments for the LiteLLM compromise

• Putting models to the secure coding test: Security rules
  writeup2026-10-19

  Identified SCA, SAST and IaC vulnerabilities and code quality suggestions in the generated apps

• [tl;dr sec] #343 - Hugging Face Technical Report, AWSHound, OWASP Agentic Skills Top 10
  article2026-08-27

  Analyzed code generated by AI coding agents in the plan versus default mode test

• Putting models to the secure coding test: Plan vs default mode
  article2026-08-19

  Identified SCA, SAST and IaC vulnerabilities and code quality suggestions in the generated code

• 'ChainDrop' worm compromises hundreds of popular npm packages
  writeup2026-08-04

  Identifies hosts, containers and build environments where a compromised package version was installed

• Datadog AI-Native SAST
  article2026-05-31

  Datadog platform feature that integrates SAST vulnerability findings, enhanced with AI assessments, explanations, and suggested fixes

• Supply Chain Firewall (Datadog)
  repo

  backend service allowing centralized ALLOW/BLOCK policy management, run outcome reporting, and observability for SCFW deployments across a fleet