# Replit — Package Firewall: Blocking 8,000+ malicious packages daily

- Company: Replit (replit.com)
- Announced: 2026-06-09T21:52:19+00:00
- Category: not stated
- Coverage: not counted
- Announcement: yes
- Group: announcements
- Source: https://replit.com/blog/package-firewall
- Record: https://forck.live/items/17897-package-firewall-blocking-8-000-malicious-packages-daily
- Subject: Replit Agent

Replit already scans your projects for vulnerable dependencies, and audits your dependencies before you publish. But risk shows up earlier than that, while you are developing, the moment a malicious package gets installed. Today we're launching Package Firewall , in partnership with Socket (a software supply-chain security company) . Package Firewall blocks malicious and compromised packages from ever being installed into your app, even while you are building. This network-level security protection eliminates any window for malware to be installed into your project. It's on by default for every builder, with nothing to set up. Since rolling out a week ago, Package Firewall has been blocking around 8,000 packages per day across builders on Replit. Over the course of a year, millions of vulnerable package installs will be blocked, leaving builders and their users safer: “Replit is helping define how the next generation of software gets built, with AI agents working alongside developers to create and ship applications faster. That makes install-time security more important than ever. …

---

Record: https://forck.live/items/17897-package-firewall-blocking-8-000-malicious-packages-daily
Catalogue: https://forck.live/llms.txt
Current issue: https://forck.live/feed.md