Semgrep Product Update

Dec 4, 2025
Malicious Dependency Detection now Generally Available

In light of the latest supply chain attacks, we're excited to announce that malicious dependency detection is now a generally available feature included in Semgrep Supply Chain.

For the GA version, we made the performance much faster even while adding tens of thousands more advisories for a grand total of 80,000 SCA rules. It’s also now available in the API, easily integrated with Policies to block malicious dependencies from getting introduced, and with Jira.

Read more about how malicious dependency detection helps protect against open source malware attacks

profile image
Nabeel Saeed