Introducing StepSecurity Artifact Monitor: Detect Unauthorized Software Releases in minutes, not months

StepSecurity Artifact Monitor is a new tool that continuously watches artifact registries (npm, Docker Hub, PyPI) to detect unauthorized software releases. It works by correlating each published artifact with a corresponding CI/CD workflow execution, flagging any release that bypasses the approved pipeline as non-compliant. Real-world supply chain attacks like the Kong, Ultralytics, and xrpl.js incidents are cited as examples where such monitoring could have caught malicious packages within minutes. The tool sends instant alerts via Slack, email, or SIEM and requires no changes to existing developer workflows.