NetRise Extends Provenance to Developer Workflows, Stopping Malicious Packages Before They Reach The Build Pipeline
New Package Firewall CLI, VS Code extension, and AI coding assistant plugins enforce package trust before malicious or policy-violating dependencies are installed.
AUSTIN, Texas, July 30, 2026 /PRNewswire/ -- NetRise®, the software supply chain security company that exists to eliminate blind trust in software, today announced enhancements to NetRise Provenance®, bringing package trust enforcement into the developer workflow via Visual Studio Code, the command line, and AI coding assistants. The release enables organizations to detect and block malicious or policy-violating open source packages before they enter software projects.
The release introduces three new enforcement mechanisms that extend Provenance's package trust decisions across developer workflows:
- Provenance Package Firewall CLI: Enforces organizational policy at package install time in the command line interface (CLI), blocking malicious or non-compliant packages before they are downloaded.
- Provenance Extension for Visual Studio Code: Evaluates dependency manifests as developers write them, identifying malicious or non-compliant packages directly in the editor with contextual guidance and one-click remediation.
- AI Coding Assistant Plugins: Extends Provenance enforcement to AI coding assistants, including Claude Code, Gemini, and Codex, applying the same package trust decisions and policy enforcement to AI-initiated dependency installs.
Modern software supply chain attacks, such as the recent LiteLLM and Axios compromises, share similar characteristics: a package or one of its dependencies is compromised. The malicious release stays published and is pulled into every project that requests it, until it is detected. Each compromise was quickly discovered and fixed, with the window of exposure being merely hours.
"The problem is everything that happens while it's still up," said Michael Scott, Co-Founder and CTO of NetRise. "Builds run, releases go out, containers deploy, all automatically. AI tools pull dependencies into projects for people who aren't even developers. By the time an advisory is published and the package is quarantined, the compromised version has already spread."
"Provenance is built for that window. It blocks the package at every point of install - the developer machine, the software and firmware build pipeline, the AI assistant working on a user's behalf. It shifts the approach of CISOs and Product Security leaders into one of proactive defense rather than reactive response. When the next attack makes headlines, they have the confidence that the affected packages never got in."
The new mechanisms move package trust decisions earlier in the software development lifecycle by evaluating dependencies as they are introduced into a project and enforcing the same policy at install time. A shared policy engine ensures the same trust decision is applied in the editor, at the command line, in AI coding assistants, and in continuous integration (CI).
Developers receive immediate feedback while they edit dependency manifests, including plain-language explanations for flagged packages, one-click remediation, and options to record policy exceptions. The Package Firewall enforces those same decisions during package installation.
"The oldest problem in cybersecurity isn't malicious code—it's trusting software before you know where it came from or whether it deserves that trust," said Thomas Pace, Co-founder and CEO of NetRise. "Malicious packages are just the latest example of a much older problem: organizations continue to rely on software and components they haven't truly validated. That model has to end. Software should prove its origin, integrity, and lineage before it ever runs, and when something does slip through, you should immediately understand where it came from and everywhere it exists. With Provenance integrated into the developer workflow and Turbine continuously validating software in production, that becomes the foundation of how software is built and trusted."
The new enforcement capabilities build on Provenance's existing software supply chain intelligence, extending the same package trust decisions from dependency authoring through software delivery. Learn more about NetRise Provenance at netrise.io/products/provenance.
The Provenance Package Firewall CLI, the AI coding assistant plugins, and the Provenance extension for Visual Studio Code are available to Provenance customers, with initial support for the Python (PyPI) ecosystem and additional ecosystems planned.
Resources
- Schedule a demo: To see Provenance enforce trust from the editor through the pipeline, request a demo at https://www.netrise.io/demo-request.
- For more information about NetRise Provenance, visit: https://www.netrise.io/products/provenance.
- Meet with us at Black Hat USA 2026: Visit Booth #5547 or schedule a private meeting with the NetRise team: https://www.netrise.io/company/events/netrise-black-hat-usa-2026
For more information or to request a demonstration, visit netrise.io or contact [email protected].
About NetRise
NetRise is the software supply chain security company that exists to eliminate blind trust in software forever. By identifying every component in each binary image across firmware, kernels, operating systems, containers, and applications, NetRise exposes the full stack of inherited risk that source-based tools, vendor SBOMs, and questionnaires cannot see. Non-code related risk uncovered includes hidden dependencies, cryptographic artifacts, misconfigurations, secrets, among others. Global enterprises that produce and consume software, including government agencies, rely on NetRise to validate what they ship and what they run. When the software supply chain is compromised by bad actors, NetRise answers the questions, "how far do these compromises extend?" and "where am I exposed?" enabling rapid identification, prioritization, mitigation, and policy updates, reducing material risk to the business. NetRise has entered into an agreement to be acquired by Accenture (NYSE: ACN), which is also taking a majority investment in Dragos. Upon close of the transactions, NetRise will operate under Dragos.
https://www.netrise.io
Press & Media Contact
Danielle Ostrovsky
Hi-TouchPR
[email protected]
SOURCE NetRise
Share this article