Ossprey raises $2.65m to fight AI-era software supply chain attacks.

Ossprey raises $2.65m to fight AI-era software supply chain attacks. Learn More

Ossprey

Ossprey raises $2.65m to fight AI-era software supply chain attacks.

Ossprey

Ossprey CLI

Stop malware before it installs.

Stop malware before it installs.

Stop malware before it installs.


The Ossprey CLI wraps npm, pnpm, yarn, pip, poetry and uv. Every package a command is about to install is checked against Ossprey’s malware database first. If anything is flagged the install is blocked, keeping you safe.


The Ossprey CLI wraps npm, pnpm, yarn, pip, poetry and uv. Every package a command is about to install is checked against Ossprey’s malware database first. If anything is flagged the install is blocked, keeping you safe.

zsh — ~/acme-web

$ npm install chalk-next

ossprey: WARNING: chalk-next:1.0.4 contains malware.

ossprey: blocked `npm install chalk-next`

$ npm install chalk

ossprey: no malware found, forwarding to npm


added 1 package in 412ms

$ npm install chalk-next

ossprey: WARNING: chalk-next:1.0.4 contains malware.

ossprey: blocked `npm install chalk-next`

$ npm install chalk

ossprey: no malware found, forwarding to npm


added 1 package in 412ms

$

/ Zero-config protection

Protect your codebase from malware

Protect your codebase from malware

Protect your codebase from malware

The Ossprey CLI reliably protects your repositories by preventing known malware from ever installing

The Ossprey CLI reliably protects your repositories by preventing known malware from ever installing

Step 01

$ npm install left-pad

npm

pnpm

yarn

pip

poetry

uv

A dependency tries to install

Step 02

ossprey

Checked for malware first

Step 03

Clean — install runs

exit 0

Malware — install blocked

exit 1

Either way, before anything lands

/ PRE-INSTALL VALIDATION

Security checks built into your Cursor workflow.

Security checks built into your Cursor workflow.

1. Read the package

Cursor asks to install a JavaScript or Python dependency. Ossprey examines what’s inside, not just what it claims to be.

2. Validate its intent

Ossprey detects malicious behaviour that conventional vulnerability and signature checks can miss.

3. Install with context

Get an actionable security verdict before a package enters your environment—without slowing your development flow.

/ SEE IT IN CONTEXT

See the signal before the install.

See the signal before the install.

From a Cursor conversation to a clear Ossprey scan result, every package decision stays visible and actionable.

Cursor conversation showing packages installed through Ossprey
Ossprey scan results validating installed packages

/ BUILT FOR CURSOR

Stay fast. Know what you’re installing.

Stay fast. Know what you’re installing.

No manual review queue. No change to the way your team prompts, ships, or experiments. Ossprey simply makes package installation safer at the moment it matters.