Ward: Open-source tool intercepts npm installs to block supply chain attacks for Claude Code users
Ward is an open-source security tool built by Vanguard Defense Solutions after the [email protected] compromise incident. It hooks into your package manager and checks every package before install scripts execute.
When Claude Code runs npm install on your behalf, Ward automatically screens packages. The tool includes a Claude Code hook that intercepts every install command before execution, eliminating the need for manual intervention.
Key features
- Blocks known malware packages
- Detects typosquats (warns when packages like "axxios" resemble legitimate packages like "axios")
- Flags suspicious install scripts
- Identifies version anomalies
- Ships with 42 verified real-world attack patterns
Example output
$ npm install [email protected]
✗ ward: BLOCKED
This version steals SSH keys and cloud credentials
Safe version: 1.14.0Installation
npm install -g wardshield
ward initThe tool is MIT licensed and includes 286 tests. It was developed specifically for the Claude Code community following supply chain attack concerns.
Additional resources include a live threat feed at wardshield.com and the GitHub repository at Vanguard-Defense-Solutions/ward.
📖 Read the full source: r/ClaudeAI
👀 See Also
AI Agent Security: Beyond Jailbreaks to Tool Misuse and Prompt Injection
AI agents that browse the web, execute commands, and trigger workflows face security risks from prompt injection and tool misuse, where untrusted content redirects legitimate tools like shell execution and HTTP requests.
MCP Server CVE Exposure Mapping and Public API Released
Researchers have mapped CVE exposure across thousands of MCP servers and built a public API for querying dependency vulnerabilities. The API allows searching by repo/name, filtering by severity, and sorting by CVE count or recency.
Pi: $100M AI Cyber Agent from Ex-Tesla Hacker Secures xAI, Patches Bugs in Minutes
Pi, an AI security agent from former Tesla lead hacker Yoni Ramon, uses context-aware vulnerability triage and automated patching. Early customer Navan reports 90% of bugs are fixed in minutes, saving 1-2 FTEs.
Anthropic reveals industrial-scale Claude AI data extraction by Chinese labs
Anthropic confirmed Chinese AI labs used over 24,000 fraudulent accounts to scrape 16 million exchanges from Claude, extracting safety guardrails and logic structures for military and surveillance systems.