Cloudsmith has introduced new policy controls for software supply chain governance in its artifact repositories. The update adds cooldown policies, policy templates, and expanded evaluation triggers. The move comes as attacks on open source package ecosystems renew attention on how quickly malicious code can spread through developer tools and build pipelines before security teams can respond.
Cloudsmith this week revealed it has expanded the policy management and continuous risk detection capabilities it makes available within its software artifact management platform to now include policy templates, cooldown policies, and expanded evaluation triggers. Alison Sickelka, vice president of product for Cloudsmith, said these additions to the platform will make it simpler to prevent malicious packages from inadvertently being incorporated into the binaries that DevOps teams deploy in production environments
Cloudsmith announced an expansion to its policy management and continuous risk detection capabilities, adding policy templates, cooldown policies, and expanded evaluation triggers. The new features continue to strengthen the artifact repository as the most critical point of control for securing the software supply chain and providing proactive protection for developers
Barclays' latest Regional Investment Map shows that UK businesses attracted £14.4 billion in equity investment in H1 2026, up 26 percent from H2 2025. Northern Ireland investment rose 63.4 percent to £72.2 million, led by a £53.5 million round for Cloudsmith. Cloudsmith's raise was one of the standout deals driving Northern Ireland's growth.
Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI coding agents.
Microsoft has cut off access to dozens of its open source projects hosted on GitHub as it investigates how hackers apparently breached the projects and injected password-stealing malware into the code. According to security firm Cloudsmith and community-driven malware analysis site OpenSourceMalware, which were some of the first to flag the hack, the malware allowed the hackers to steal the users’ passwords and other sensitive credentials when they opened the compromised tools in their AI coding apps.
Cloudsmith, a Belfast software company, has received a £50m investment led by two US venture capital firms. It is the largest deal of this kind ever done by a Northern Ireland-based technology company and the investment will be used to increase hiring and accelerate software development. The company currently has 130 staff, mainly based in Belfast.
Cloudsmith, the universal artifact management platform trusted by some of the world’s leading enterprises, today announced a $72M Series C financing led by TCV and with participation from Insight Partners, along with investments from other existing investors.
Cloudsmith Inc., a startup that helps software teams manage application components, has secured $72 million in new funding. The Series C round was led by TCV, which was also the biggest backer of the company’s previous raise last year. Cloudsmith stated in its funding announcement today that the venture fund was joined by other existing investors and Insight Partners. The company’s total outside funding now exceeds $110 million.