🧰 Dev Machine Guard

The items that name it 16

• Binance’s $6.3 Billion Hack Puts Developer Machine Security in Focus
  articleas tools2026-10-30

  Inventories developer software (extensions, packages, AI tools, MCP server configurations) and identifies known threats. Free open-source Community agent for macOS, Windows and Linux with local terminal, JSON or HTML reports; enterprise dashboard checks devices against StepSecurity threat intelligen

• Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines
  writeupas tools2026-10-30

  StepSecurity product that flags anthropic.claude-code version 2.1.313 as malicious on developer machines and recognizes 2.1.312 and 2.1.314 as clean

• litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader
  writeupas tools2026-10-21It is written here as Dev Machine Guard (StepSecurity): suspicious files detection for unexpected .pth and sitecustomize.py files in Python environments.

  StepSecurity

• OpenCode Security Breach: Distillation Attack Hit Console Users With Linked AI Providers. How to Find OpenCode on Developer Machines and Respond
  articleas classification.technologies2026-10-18
• @7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow
  writeupas tools2026-08-28

  Extends compromised package detection to developer workstations; suspicious file rules can identify the payload filename and temporary executable pattern associated with this incident

• Dev Machine Guard Now Inventories Where Developer Credentials Live
  articleas tools2026-08-28

  StepSecurity product that now inventories credential sources across developer machines via a new Credentials page, showing spread across the fleet and plaintext vs protected status.

• Control Which Package Registries Your CI Jobs and Developer Machines Use
  articleas tools2026-08-12

  Reads developer machine package manager configuration files (.npmrc, pip.conf) to report the effective registry and its source; also sets device policies to centrally configure the machine level .npmrc

• Anthropic Incident: An AI Agent Published a Malicious Package to PyPI and 15 Real Systems Ran It
  articleas tools2026-08-03

  Applies install-time and runtime scrutiny to package installs on developer laptops, another point where packages are installed straight from public registries.

• Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan
  writeupas tools2026-07-30

  discovers compromised npm packages installed on developer machines and detects suspicious files dropped by this campaign

• Maven Support Comes to GitHub Checks and OSS Package Search
  articleas tools2026-07-01

  (Coming soon) Adds Maven coverage on developer machines so Java dependencies can be inventoried and audited across a fleet

• Miasma and Hades Are Spreading Now: Detect Them on Developer Machines with Suspicious Files
  articleas tools2026-06-18

  StepSecurity product providing visibility into developer machines via a lightweight agent deployed through existing MDM or EDR tooling on macOS, Windows, and Linux

• 400+ AUR Packages Hijacked: What the “Atomic Arch” Campaign Means for Supply-Chain Security
  writeupas tools2026-06-18

  StepSecurity tool providing visibility on developer workstations, alerting on suspicious activity such as credential theft targeting SSH keys, GitHub tokens, and browser sessions.

• Dev Machine Guard Now Scans Extensions Across Every Modern IDE
  articleas tools2026-06-02

  StepSecurity product that scans and inventories IDE extensions/plugins across eight IDE families on macOS, Windows, and Linux, assigning a Security Score and detecting compromised/typosquat items; open source scanning engine, available in community mode (local data) and enterprise mode (feeds StepSe

• SubQuery npm package (@subql/common) compromised with credential-stealing payload
  articleas tools

  Maintains real-time inventory of IDE extensions and installed npm/Python/open-source packages on developer workstations, enabling fleet-wide search for compromised tools/packages. Has a free version.

• Dev Machine Guard Now Supports Linux - StepSecurity
  articleas tools

  open-source scanning engine that inventories developer machines (AI coding agents, AI CLI tools, IDE extensions, JetBrains IDEs, MCP server configs, npm packages, Linux system packages, local frameworks/processes/shell tooling, device inventory) across macOS, Windows, and now Linux, for supply chain

• Dev Machine Guard Now Supports Windows - StepSecurity
  articleas tools

  Scanning engine and enterprise dashboard that inventories developer machines for AI coding agents, MCP servers, IDE extensions, npm packages, and other security-relevant software; now supports Windows (AMD64/ARM64) in addition to macOS