---
id: 6736
title: "Coding Agents Just Reopened Your Software Supply Chain Blind Spot"
source_domain: jfrog.com
source_url: "https://jfrog.com/blog/introducing-agent-package-resolution/"
published_at: "2026-08-25T12:36:35Z"
tags: ["ai-security", "supply-chain", "npm", "jfrog", "ai-agents", "software-supply-chain", "slopsquatting", "artifactory"]
phying_url: "https://phying.com/item/6736"
lang: en
---

# Coding Agents Just Reopened Your Software Supply Chain Blind Spot

## Summary

JFrog warns AI agents bypass governed supply chains by fetching dependencies from public registries, amid a 451% surge in malicious npm packages and slopsquatting risks. Its fix: Agent Package Resolution routes agent downloads through Artifactory so policies, scanning and audit trails apply again.

## Why it matters

This coverage gives security teams current context for monitoring, validation, and remediation.

## Intelligence Metadata

- **Sources:** jfrog.com
- **Published:** 2026-08-25T12:36:35Z
- **Original:** https://jfrog.com/blog/introducing-agent-package-resolution/
- **Phying News:** https://phying.com/item/6736