Real-time Malicious Package Protection for AI Coding Agents

Claude Code, Cursor, Codex is the new wave of AI coding agents. They can scaffold projects, write features, and wire up dependencies faster than most of us can read a README.md . They also run npm install without a second thought. That’s where things get interesting. These agents have zero ability to distinguish a legitimate package from a malicious one . Unlike first-party code which the agents can review, they have no visibility on the third-party code inherited through open source package dependencies. They will install whatever looks right based on the name, the prompt, and the training data. The attack surface is real. There are real-world examples: Shai-Hulud 2.0 : A self-replicating worm that compromised zapier-sdk , @asyncapi , and posthog packages — over 500 npm packages and 25,000+ repositories affected. The malware propagated via preinstall scripts and harvested cloud credentials. eslint-config-prettier : 30 million weekly downloads. Compromised through a phishing attack on