Aikido

@AikidoSecurity

Secure everything devs build, ship & run. 🌐 aikido.dev ⭐️ github.com/AikidoSec Get developers back to building.

San Francisco, CA

aikido.dev

Joined September 2022

Affiliates Replies Articles Media

Pinned
Aikido
@AikidoSecurity
May 14
Aikido Intel is your earliest warning for supply chain threats. Our engine detects malware and vulnerabilities in open-source ecosystems within minutes. Built by our team of security researchers & AI engineers. Bookmark it: intel.aikido.dev
Aikido
@AikidoSecurity
13h
Our malware research team just flagged 10 malicious versions of 7nohe/openapi-react-query-codegen on npm. The payload hides in a binding.gyp file, so it runs code at npm install even when package.json has no install scripts. If it's in your tree, pin off 1.6.3, 3.0.3, 2.2.1, and
Aikido
@AikidoSecurity
14h
‼️Supply chain attack. `7nohe/openapi-react-query-codegen` on npm. 150k weekly downloads.
Charlie Eriksen
@CharlieEriksen
14h
Just noticed 4 malicious versions of the package `@7nohe/openapi-react-query-codegen` on npm. github.com/7nohe/openapi-… It is actively being exploited: github.com/7nohe/openapi-…
Aikido
@AikidoSecurity
21h
We've been shipping, so you can get back to building 🔥👇 - Aikido Deep Review: AI agents that reason and test your PRs with full codebase context - Aikido Libraries: CVE patches with no breaking changes - CVE Exploitability Analysis: finds which CVEs are actually exploitable in
Aikido
@AikidoSecurity
23h
Gogs, the open-source Git platform, has a long history of RCEs, most taking a while to fix. This case was different: we reported a batch of vulnerabilities and all of them were fixed as of version 0.14.3. The most technically interesting is a remote code execution
Yet another RCE in Gogs, but it's fixed this time!
From aikido.dev