Ward: Open-source tool intercepts npm installs to block supply chain attacks for Claude Code users
Ward is an open-source security tool built by Vanguard Defense Solutions after the [email protected] compromise incident. It hooks into your package manager and checks every package before install scripts execute.
When Claude Code runs npm install on your behalf, Ward automatically screens packages. The tool includes a Claude Code hook that intercepts every install command before execution, eliminating the need for manual intervention.
Key features
- Blocks known malware packages
- Detects typosquats (warns when packages like "axxios" resemble legitimate packages like "axios")
- Flags suspicious install scripts
- Identifies version anomalies
- Ships with 42 verified real-world attack patterns
Example output
$ npm install [email protected]
✗ ward: BLOCKED
This version steals SSH keys and cloud credentials
Safe version: 1.14.0Installation
npm install -g wardshield
ward initThe tool is MIT licensed and includes 286 tests. It was developed specifically for the Claude Code community following supply chain attack concerns.
Additional resources include a live threat feed at wardshield.com and the GitHub repository at Vanguard-Defense-Solutions/ward.
📖 Read the full source: r/ClaudeAI
👀 See Also
Analysis of Claude Code's Instrumentation and Telemetry Capabilities
A source code analysis reveals Claude Code implements extensive behavior tracking including keyword-based sentiment classification, permission prompt hesitation monitoring, and detailed environment fingerprinting.
AgentSeal Security Scan Finds AI Agent Risks in Blender MCP Server
AgentSeal scanned the Blender MCP server (17k stars) and identified several security issues relevant to AI agents, including arbitrary Python execution, potential file exfiltration chains, and prompt injection patterns in tool descriptions.
Redacta: An OpenClaw Skill That Pseudonymises Clinical Text Before It Reaches an LLM
Redacta is an open-source OpenClaw skill that detects identifiers in medical text and replaces them with consistent pseudonyms before sending to an LLM. It runs locally and has passed 1,400 downloads on ClawHub.
Endo Familiar: Object-Capability Sandbox for AI Agents
Endo Familiar implements object-capability security for AI agents: agents start with zero ambient authority, receive only explicit references to specific files or directories, and can derive narrower capabilities in sandboxed code.