Tool
Supply-Chain Firewall
- First Reported
- Mar 25, 2026
- Latest Reported
- Apr 17, 2026
Reported Context (3)
- Defensive measures such as dependency cooldowns, minimum release age settings, and tools like GuardDog, Supply-Chain Firewall, and Datadog SCA can reduce exposure but do not fully eliminate the risk. Dependency Cooldowns Can Slow Malicious Package Releases, but Do Not Eliminate Supply-Chain Risk
- The Supply-Chain Firewall (SCFW) is an open source project that transparently wraps pip install and npm install and automatically blocks known malicious packages. Compromised axios npm releases added a dependency that deployed a cross-platform RAT
- The Supply-Chain Firewall (SCFW) is an open-source project that transparently wraps ‘pip install’ and ‘npm install’ and automatically blocks known malicious packages such as the compromised LiteLLM ones. Datadog Traces TeamPCP Supply-Chain Campaign to Compromised LiteLLM PyPI Releases
Malware (1)
People (3)
Threat Actors (1)
MITRE ATT&CK (21)
Vendors (4)
Products (13)
Tools (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.