Chainguard Adds Go and .NET Libraries for Supply Chain Attack Protection

Seattle, WA – Chainguard has expanded its software library protection to new language ecosystems. The newly announced Chainguard Libraries for Go and .NET offer a secure method for integrating open-source dependencies, mitigating risks associated with supply chain attacks.

Additionally, Chainguard Libraries now provides CVE remediation for JavaScript and Go ecosystems. These fixes backport critical and high-severity vulnerability patches, assisting teams where upgrading to the latest software versions is not always immediately feasible.

Chainguard Libraries also commits to protecting customers from zero-day vulnerabilities as soon as they are publicly disclosed. Through the company's Athena threat intelligence system, customers receive new patches for vulnerabilities discovered by frontier AI models developed by major institutions.

Patrick Donahue, SVP of Product at Chainguard, stated that attackers rely on developers and AI agents to trust installed packages. Chainguard Libraries aims to eliminate this need for trust, preventing malware and patching vulnerabilities.

Chainguard reports that AI has escalated threats to open-source dependencies. The company's research indicates that 76% of cybersecurity leaders have experienced or suspect their organization has been subjected to an AI-driven attack in the last 12 months. Attackers are publishing malicious packages, hijacking trusted packages, and registering non-existent package names, knowing that developers and AI agents will install them without hesitation.