---
id: 6683
title: "Shifting Security ‘Lefter’ Than Left Is The Key To Avoiding Risky Packages"
source_domain: jfrog.com
source_url: "https://jfrog.com/blog/shifting-security-lefter-than-left-is-the-key-to-avoiding-risky-packages/"
published_at: "2025-09-19T20:01:37Z"
tags: ["npm", "jfrog", "supply-chain-attack", "shift-left", "curation", "oss-security", "jfrog-com"]
phying_url: "https://phying.com/item/6683"
lang: en
---

# Shifting Security ‘Lefter’ Than Left Is The Key To Avoiding Risky Packages

## Summary

JFrog's CTO says security must shift 'lefter than left': after September 2025's biggest-ever npm attack (20 packages, 2B+ downloads), blocking risky packages at the door beats manual vetting.

## Intelligence Metadata

- **Sources:** jfrog.com
- **Published:** 2025-09-19T20:01:37Z
- **Original:** https://jfrog.com/blog/shifting-security-lefter-than-left-is-the-key-to-avoiding-risky-packages/
- **Phying News:** https://phying.com/item/6683