🧰 Supply Chain Firewall

The items that name it 6

• Code security for new coders
  article2026-10-26

  Datadog open source tool that blocks malicious packages from being installed

• Putting models to the secure coding test: Security rules
  writeup2026-10-19It is written here as Supply Chain Firewall (SCFW).

  Prevents installation of malicious or vulnerable packages; caught outdated dependencies in the Sonnet 5 and Composer 2.5 runs

• [tl;dr sec] #343 - Hugging Face Technical Report, AWSHound, OWASP Agentic Skills Top 10
  article2026-08-27

  Intercepted AI models' attempts to install vulnerable npm packages during setup

• Putting models to the secure coding test: Plan vs default mode
  article2026-08-19It is written here as Supply Chain Firewall (SCFW).

  Open source command line tool, run as 'scfw run npm install', that blocked installation of malicious or vulnerable npm and Python packages such as multer, nodemailer, vite and esbuild versions

• The Pros and Cons of NPM v12's Security Improvements
  article2026-06-10It is written here as supply-chain-firewall (Datadog).

  Open-source package firewall that wraps package managers to check for and block vulnerable or malicious packages before install; released 2024

• Supply Chain Firewall (Datadog)
  repoIt is written here as Supply Chain Firewall (SCFW).

  command-line tool preventing installation of malicious npm and PyPI packages by inspecting package manager commands before they run