Block malicious packages across your organization with Supply Chain Firewall and Datadog Code Security

Datadog has expanded its open-source Supply Chain Firewall through Code Security to provide organization-wide protection against malicious software packages before they are installed. The firewall intercepts supported npm, pip, and poetry commands, evaluates proposed dependencies against malicious-package intelligence, vulnerability advisories, and recency checks, and can block or warn developers about risky packages. New centralized management enables organizations to apply shared allowlists and blocklists across developer environments and collect firewall events in a unified reporting feed. Code Security also retrospectively reevaluates recorded installations as threat intelligence changes, alerting teams when packages previously installed on workstations or CI systems are later identified as malicious. A new GitHub Action extends the same inspection, policy enforcement, and reporting to CI runners, addressing package-installation risks across local development, automated pipelines, and AI-assisted development workflows.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.