Company news
Eye Security Releases Supply-Chain Hardening Skills: npm-harden, pypi-harden, and ci-audit
Published 15 October 2026
WHAT HAPPENED
Eye Security released three new supply-chain hardening tools called npm-harden, pypi-harden, and ci-audit. These tools audit package-manager and GitHub Actions settings to identify security gaps and enforce a three-day release-age cooldown on new npm and PyPI packages.
WHO IS INVOLVED
Eye Security developed the skills in response to threats from self-propagating malware like Shai-Hulud, a worm first observed in 2025 that compromises packages and steals developer credentials. The tools target development teams using AI coding agents and package managers.
WHY IT MATTERS
Compromised packages can execute malicious code during installation before security scans detect them. A release-age gate delays fresh packages from entering dependency resolution, giving the ecosystem time to identify and flag malicious releases before they propagate widely.
- Type
- Product launch
- Category
- Security Operations
- Source
- linkedin.com ↗
See Eye Security’s full company record.
Look up its funding history, investors, hiring and competitors in Mandos. Choose a platform plan, or unlock this one company for free.
- Funding history and investors
- Hiring trends and departments
- Competitor comparisons
- Scores and supporting data