[VibeDefend] Agent-Installed Dependency Analysis

Coding agents install packages on their own, and they don’t always pick well. Every dependency added during an agent coding session is analyzed in Scan Diff to detect slopsquatting (malicious packages registered under names LLMs tend to hallucinate), malicious packages reported in OSV or CybeDefend’s threat intelligence database, end-of-life libraries and unmaintained projects. Risky dependencies are flagged directly in the session diff.