Day one on a new team. Sam installs one extension, signs in, and a warning shows up on a package she didn't choose. Mira and Cal walk through her first ten minutes with Safeguard in the editor and in the chat window: install the VS Code or JetBrains extension, sign in with the device flow, pick a remediation strategy, apply one fix, read the diff, and hand the pull request to a teammate. Then they connect Claude or ChatGPT to Safeguard's hosted MCP server and see what a fresh workspace can and cannot do. In the news, three October stories about things that ran before a person looked: a malicious LiteLLM release on PyPI (JFrog, 21 Oct; LiteLLM's own account, 23 Oct), a planted AGENTS.md that led Codex to try installing a malicious package (Forever Security, 25 Oct), and an npm worm that armed GitHub repositories with startup hooks for Claude, Cursor and VS Code (JFrog, 26 Oct). Under the hood, the inline Package Firewall check for typosquatting, dependency confusion and malicious package names, why a hosted MCP server means there is no package to install, and what to ask about any AI coding agent. Theo brings one setting, and the episode ends with a try-this-today checklist for secure coding with AI. Topics: AI coding agents, secure coding with AI, VS Code extension, JetBrains plugin, MCP server, MCP security, Claude connector, ChatGPT, Cursor, Claude Code, OpenAI Codex, LiteLLM, JFrog, Forever Security, AGENTS.md, npm worm, malicious packages, typosquatting, dependency confusion, supply chain security, code review of AI generated code. For developers trying AI coding agents: your first ten minutes with Safeguard in the editor and in chat, from the VS Code and JetBrains extensions to the MCP install, with notes on Claude Code, Cursor and GitHub Copilot, MCP security, prompt injection, permissions and AI code security. Chapters00:00 Cold open00:28 Intro00:51 News: LiteLLM 1.107.0, a planted AGENTS.md, and the npm worm hooks04:05 Sam's first ten minutes: editor and chat08:07 Under the hood10:02 Theo's one setting10:52 Try this today11:58 Outro SourcesJFrog Security Research: LiteLLM 1.107.0 malicious release: https://research.jfrog.com/post/litellm-hijacked-again/BleepingComputer: AI coding agents hijacked using AGENTS.md file in Do: https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/JFrog Security Research: beyond testmetest, 42 hijacked GitHub repos: https://research.jfrog.com/post/beyond-testmetest-42-hijacked-github-repos/The Register: worm armed 42 GitHub repos by hiding a payload too big t: https://www.theregister.com/security/2026/10/26/worm-armed-42-github-repos-by-hiding-a-payload-too-big-to-fail/5305570LiteLLM: The attack chain behind the v1.107.0 LiteLLM release: https://docs.litellm.ai/blog/security-incident-oct-21-2026-attack-chainThe Register: LiteLLM supply chain attack started with an exposed mast: https://www.theregister.com/security/2026/10/26/litellm-supply-chain-attack-started-with-an-exposed-master-key/5305544IDE Support (docs): https://docs.safeguard.sh/docs/ide-support?utm_source=podcast&utm_medium=audio&utm_campaign=permission-prompt&utm_content=ep02MCP Integrations (docs): https://docs.safeguard.sh/docs/mcp?utm_source=podcast&utm_medium=audio&utm_campaign=permission-prompt&utm_content=ep02 Topics: AI coding agents, Safeguard in the editor, VS Code, JetBrains, MCP, MCP security, prompt injection, LiteLLM, npm worm, AGENTS.md, Claude Code, Cursor, GitHub Copilot, Codex, AI code security, DevSecOps.
