Letting AI agents run npm install safely
Agents install packages by the name they think is right. That can be a typo, a name nobody has published, or a version pushed an hour ago. Muzzle checks each one before the install runs.
● Bash(npm install @acme/pay-utils)
⎿Muzzle blocked this: @acme/pay-utils (npm) is known malware (MAL-2026-0412). To allow it, click Allow on this entry in Muzzle's Activity.
New package npm install react-form-kitt · was first published 2 days ago, and runs an install script
Unknown package pip install fastapi-auth-helpers · isn't on PyPI
What Muzzle does
Known malwareBlocked before it installs
BlockA brand-new package or versionRecorded in Activity
WarnA name the registry doesn't haveRecorded in Activity
Warnnpm, pnpm, yarn, bun, npx, pip, uv, cargo and gem. Free with Claude Code; Codex needs Pro.
Related
Put Muzzle between your agents and the internet
Download for Mac
Free · Apple Silicon · macOS 12 or later