https://depwall.com/blog/ Measured findings on npm and PyPI supply-chain attacks, and what an install-time gate does and does not catch. en Thu, 13 Aug 2026 00:00:00 GMT https://depwall.com/blog/a-browser-extension-cannot-block-an-install/ https://depwall.com/blog/a-browser-extension-cannot-block-an-install/ Thu, 13 Aug 2026 00:00:00 GMT We shipped a DepWall extension for npm and PyPI pages. It reports; it does not block — the badge says would, the manifest description says does not block, and a test asserts both. ai agents supply chain verdicts https://depwall.com/blog/the-string-constructor-was-a-valid-npm-integrity-hash/ https://depwall.com/blog/the-string-constructor-was-a-valid-npm-integrity-hash/ Thu, 13 Aug 2026 00:00:00 GMT Our exact-hash denylist is the one signal with no false-positive rate to trade off. Then we probed it with six inherited property names and it blocked on every one of them. npm bugs supply chain osv https://depwall.com/blog/two-blocks-are-not-the-same-claim/ https://depwall.com/blog/two-blocks-are-not-the-same-claim/ Thu, 13 Aug 2026 00:00:00 GMT A byte-for-byte match to a published advisory and a package that was uploaded last Tuesday both stop the install. Rendering them identically hides the difference that decides whether it is worth ten seconds or ten minutes. verdicts measurement supply chain https://depwall.com/blog/most-live-npm-malware-walks-past-metadata-checks/ https://depwall.com/blog/most-live-npm-malware-walks-past-metadata-checks/ Sat, 08 Aug 2026 00:00:00 GMT We ran our own engine over the npm packages OSV flags malicious that are still installable today. Three blocked, eight asked, twenty-five were allowed. Here is why, and what we changed. npm supply chain measurement osv https://depwall.com/blog/your-agents-reference-docs-were-scanned-as-shell-scripts/ https://depwall.com/blog/your-agents-reference-docs-were-scanned-as-shell-scripts/ Sat, 08 Aug 2026 00:00:00 GMT Skill bundles ship reference documents the agent is instructed to open. We were selecting them correctly and then asking them the wrong question entirely. ai agents prompt injection skills measurement https://depwall.com/blog/pip-install-pinned-version-was-checking-the-wrong-release/ https://depwall.com/blog/pip-install-pinned-version-was-checking-the-wrong-release/ Sat, 08 Aug 2026 00:00:00 GMT pip install evil==0.1.0 was judged on latest's age, latest's readme and latest's sdist. Four call sites had it, including the server, and we found it while measuring something else entirely. pypi pip bugs supply chain https://depwall.com/blog/npm-provenance-attests-the-build-not-the-source/ https://depwall.com/blog/npm-provenance-attests-the-build-not-the-source/ Sat, 08 Aug 2026 00:00:00 GMT Attackers poisoned the source repository and let the project's own GitHub Actions workflow sign the release. npm provenance did exactly what it promises, and the package was malicious anyway. npm provenance slsa supply chain https://depwall.com/blog/sessionstart-hooks-run-before-you-type-anything/ https://depwall.com/blog/sessionstart-hooks-run-before-you-type-anything/ Sat, 08 Aug 2026 00:00:00 GMT A plugin's SessionStart hook runs on startup, on /clear and on compaction. There is no install to gate and no prompt. We measured 66 real manifests to find out what the honest shape looks like. ai agents plugins code execution measurement