Show HN: Omnis Watchtower – a supply-chain tripwire for Claude Code agents (github.com)

Omnis Watchtower has been introduced as a groundbreaking supply-chain security tool designed to oversee coding agents' package installations in real-time. This tool addresses critical vulnerabilities in software supply chains where agents can inadvertently install malicious packages due to typosquats, non-existent package names, or the rapid release of harmful code. By preemptively checking every npm and PyPI install command against a comprehensive database, Watchtower can block unsafe installs, pin early releases of popular packages, and launch a 'Sentinel' subagent to investigate anything suspicious further. The significance of this tool for the AI/ML community lies in its potential to enhance security in automated coding environments dramatically. With a current success rate of filtering out bad packages without hindering workflow—showing median decision times under 500 milliseconds—Omnis Watchtower empowers developers to proceed with confidence while safeguarding their code against known exploits. Its design includes zero runtime dependencies, meaning it does not introduce additional risk to the supply chain, aligning perfectly with best practices in software integrity and security. This innovative plugin represents a crucial advancement for organizations reliant on automated package management systems.