News alert: GitGuardian adds endpoint protection as developer laptops become credential troves

GitGuardian announced Developer Endpoint Protection, arguing that recent supply-chain and SaaS incidents consistently begin with attackers harvesting plaintext credentials from developer and CI endpoints. The release cites multiple examples (including a worm compromising npm/PyPI packages, Bitwarden CLI and Trivy/LiteLLM incidents, and a Vercel exposure), warns that coding agents and MCP servers are increasing secret leakage, and describes the product’s capabilities to discover, prioritize, remediate, and detect live exfiltration of endpoint-resident secrets.