Coding Agents Just Reopened Your Software Supply Chain Blind Spot
jfrog.com | blog | #ai-security | #supply-chain | #npm | #jfrog | #ai-agents | #software-supply-chain | #slopsquatting | #artifactory
Summary
JFrog warns AI agents bypass governed supply chains by fetching dependencies from public registries, amid a 451% surge in malicious npm packages and slopsquatting risks. Its fix: Agent Package Resolution routes agent downloads through Artifactory so policies, scanning and audit trails apply again.
Why it matters
This coverage gives security teams current context for monitoring, validation, and remediation.
- Published
- Collected
--- id: 6736 title: "Coding Agents Just Reopened Your Software Supply Chain Blind Spot" source_domain: jfrog.com source_url: "https://jfrog.com/blog/introducing-agent-package-resolution/" published_at: "2026-08-25T12:36:35Z" tags: ["ai-security", "supply-chain", "npm", "jfrog", "ai-agents", "software-supply-chain", "slopsquatting", "artifactory"] phying_url: "https://phying.com/item/6736" lang: en --- # Coding Agents Just Reopened Your Software Supply Chain Blind Spot ## Summary JFrog warns AI agents bypass governed supply chains by fetching dependencies from public registries, amid a 451% surge in malicious npm packages and slopsquatting risks. Its fix: Agent Package Resolution routes agent downloads through Artifactory so policies, scanning and audit trails apply again. ## Why it matters This coverage gives security teams current context for monitoring, validation, and remediation. ## Intelligence Metadata - **Sources:** jfrog.com - **Published:** 2026-08-25T12:36:35Z - **Original:** https://jfrog.com/blog/introducing-agent-package-resolution/ - **Phying News:** https://phying.com/item/6736