---
id: 6688
title: "Stop the Chaos: How to Centralize, Secure, and Control Developer Extensions"
source_domain: jfrog.com
source_url: "https://jfrog.com/blog/centralize-secure-control-developer-extensions/"
published_at: "2025-09-10T14:52:48Z"
tags: ["devsecops", "mcp", "jfrog", "developer-tools", "supply-chain-security", "ide-extensions", "jfrog-com", "security-news"]
phying_url: "https://phying.com/item/6688"
lang: en
---

# Stop the Chaos: How to Centralize, Secure, and Control Developer Extensions

## Summary

JFrog calls for centralizing and securing developer extensions: unvetted IDE add-ons and MCP servers can be backdoors, while a controlled internal marketplace standardizes tooling and cuts waste.

## Intelligence Metadata

- **Sources:** jfrog.com
- **Published:** 2025-09-10T14:52:48Z
- **Original:** https://jfrog.com/blog/centralize-secure-control-developer-extensions/
- **Phying News:** https://phying.com/item/6688