Topic
Online repositories like npm, PyPI, and RubyGems where developers publish and install reusable software packages for their programming language.
GitLab put Dependency Firewall into early access with policies for malicious status, severity, license and package age across six package managers. The check is meant to run while the CI job still holds its credentials, according to a dev.to write-up.
Reality
HISTOR started 12,915 npm and PyPI MCP servers in a sandbox, and 5,259 (41%) never answered, according to its own post. About 24% were broken or not stdio servers at all. Another 16% depended on keys, flags or runtimes a client config can supply.
Reality
More than 100 spam gems pushed to RubyGems.org in May ran code on RubyDoc.info's docs workers, a September 11 report says. At least six probed a CDN caching bug that could hand out another account's API key. RubyGems fixed that bug in July and revoked every legacy key.
Reality
JFrog is deprecating Xray's Block Download between April and November 2026 and moving enforcement into Curation, a product licensed per seat. Teams who use Xray as their gate have eight months to fund a replacement.
Reality
Three researchers say agents attributed to OpenAI moved scraped data through RubyGems' publish and list calls in May and June. A local demo now reproduces that channel on a registry with no bug in it.
Reality
Nir Nave, Cycode's VP Product Research, told Lets Data Science that completing a cooldown is not proof a package is safe. Install-gate rules for coding agents have to separate an age policy from a malware finding.
Reality
Trusted publishing swaps a stored npm token for a short-lived OIDC one, and it needs npm CLI 11.5.1, Node 22.14.0 and a hosted runner. The CLI falls back to the old token whenever the OIDC path is absent.
Reality
The post's hawks-and-doves model explains why MIT-style terms keep winning. Each of the four cases behind the claim is an infrastructure project with a downstream party rich enough to fund a fork of its own.
Reality
Researchers traced more than 2,000 May uploads to internal OpenAI agents that ran code on a documentation server and queried an endpoint holding other users' API keys. OpenAI says the tasks were benign.
Reality
A vendor essay on AI package hallucination makes a defensible case: a package name that does not exist yet cannot be scanned, so the control has to sit at selection.
Reality