--- title: "Coding Agents Just Reopened Your Software Supply Chain Blind Spot" url: https://daily.dev/posts/coding-agents-just-reopened-your-software-supply-chain-blind-spot-qam3brqhm source_url: https://jfrog.com/blog/introducing-agent-package-resolution type: article source: "JFrog" published: 2026-08-25T12:57:50.557Z updated: 2026-08-25T12:58:18.222Z tags: ["ai-agents", "appsec", "jfrog"] reading_time: 6 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Coding Agents Just Reopened Your Software Supply Chain Blind Spot **[JFrog](https://daily.dev/sources/jfrog)** · 6 min read · 0 upvotes · 0 comments ## Summary AI coding agents like Cursor and Claude Code autonomously fetch dependencies from public registries (npm, PyPI, Maven, Docker Hub, etc.) without going through an organization's governed repository, bypassing curation policies, security scanning, and audit trails. JFrog reports malicious npm package activity surged 451% in 2025, exceeding 171,000 unique malicious packages, and nearly 20% of AI-generated package recommendations reference nonexistent packages, a risk known as slopsquatting. JFrog's new Agent Package Resolution feature (in preview), part of the JFrog Agent Plugin for Claude Code and Cursor, routes agent-initiated package requests through Artifactory automatically via session steering, persistent package-manager configuration, and server-side JFrog Curation enforcement, requiring no developer setup while preserving existing curation, Xray scanning, and audit logging. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Do AI coding agents like Cursor and Claude Code bypass my organization's package security policies? Yes, by default AI coding agents pull dependencies directly from public registries such as npm, PyPI, Maven, Go, Docker Hub, Helm, and NuGet instead of routing through a governed repository, which means curation policies, security scanning, and audit trails never get applied to those downloads. This happens because agents autonomously decide and fetch packages based on natural-language prompts rather than explicit developer selection. _Teams weighing AI agent rollouts against supply chain risk can track fixes like this via daily.dev._ ### What is slopsquatting and how common is it in AI-generated code? Slopsquatting is an attack where malicious actors register packages under names that AI models repeatedly hallucinate, then wait for developers or agents to install them. Researchers found nearly 20% of AI-generated package recommendations reference packages that don't actually exist, creating an opening for attackers to claim those names with malicious code. _Developers securing AI-assisted workflows can follow emerging supply chain threats like this on daily.dev._ ### What does JFrog's Agent Package Resolution do for Cursor and Claude Code? Agent Package Resolution is a JFrog Agent Plugin feature, currently in preview, that automatically routes package requests from Cursor and Claude Code through JFrog Artifactory instead of public registries. It works through session steering, a one-time jf setup command binding package managers to Artifactory, and server-side JFrog Curation enforcement, so both direct and indirect installs pass through existing curation and Xray scanning with no developer configuration required. _Platform teams rolling out AI coding agents can weigh governance tools like this on daily.dev._ ## Similar posts on daily.dev - [Stop Treating Coding Agent Plugins Like Settings: Introducing Agent Plugins Repositories](https://daily.dev/posts/stop-treating-coding-agent-plugins-like-settings-introducing-agent-plugins-repositories-hh3f5zrqh) · JFrog · 1 upvotes · 0 comments - [The Agent Has Entered the Supply Chain](https://daily.dev/posts/the-agent-has-entered-the-supply-chain-3e9icv83m) · JFrog · 1 upvotes · 0 comments - [How JFrog and NanoClaw are Bringing Software Supply Chain Security to the Age of Autonomous AI](https://daily.dev/posts/how-jfrog-and-nanoclaw-are-bringing-software-supply-chain-security-to-the-age-of-autonomous-ai-chwwc4wxb) · JFrog · 0 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#appsec](https://daily.dev/tags/appsec), [#jfrog](https://daily.dev/tags/jfrog) [View this post on daily.dev](https://daily.dev/posts/coding-agents-just-reopened-your-software-supply-chain-blind-spot-qam3brqhm)