macOS agent security
Best practices for using a Mac with agents
Keep Gatekeeper and SIP enabled, protect Downloads, and deny broad privacy permissions to agent harnesses.
Read the postAutomic Vault Blog
Package security for the agent era.
Practical notes on local tooling, agent-ready package packs, and the security layer below the prompt.
Latest
9 posts
macOS terminal security
Bringing macOS security to the terminal
CLI tools run inside the authority of Terminal, an agent harness, or whichever app launched them. That boundary now matters.
Read the post
Nx Console VS Code compromise
Preventing the Nx Console extension compromise
Nx Console 18.95.0 stole local developer credentials from editor sessions. Automic Vault would have stopped the local secret access.
Read the incident post
GitHub employee device breach
Preventing the GitHub employee device breach
A poisoned VS Code extension reached a GitHub employee device. Automic Vault would have prevented local credentials from becoming repository access.
Read the incident post
durabletask PyPI compromise
Preventing the durabletask PyPI compromise
Malicious durabletask PyPI releases fetched rope.pyz and stole cloud and developer secrets. Automic Vault would have blocked the local theft path.
Read the incident post
TanStack npm compromise
Preventing the TanStack npm credential theft
TanStack packages were poisoned through trusted publishing, then stole local secrets. Automic Vault would have prevented the endpoint theft.
Read the incident post
node-ipc npm backdoor
Preventing the node-ipc npm backdoor
The node-ipc backdoor ran on module load and exfiltrated secrets over DNS. Automic Vault would have prevented useful credential theft.
Read the incident post
Bitwarden CLI npm compromise
Preventing the Bitwarden CLI npm compromise
The compromised Bitwarden CLI npm package used install-time code to steal developer secrets. Automic Vault would have stopped the local theft.
Read the incident post
LiteLLM PyPI compromise
Preventing the LiteLLM PyPI compromise
LiteLLM 1.82.7 and 1.82.8 stole local credentials. Automic Vault would have prevented the workstation credential theft phase.
Read the incident post