Please confirm you are human

This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.

A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.

Hold with a pointer, or hold Space or Enter.

News

Aikido Security
aikido.dev > blog > shai-hulud-npm-resurfaces

A Shai-Hulud npm payload came back 111 days later

6+ day, 16+ hour ago   (396+ words) Advanced AppSec suite, built for devs. in-app runtime defense and threat detection. Real-time malware & vuln threats Since then, npm has introduced publish-time malware scanning. So you can imagine my surprise when I was going through our triage queue this morning…...

Aikido Security
aikido.dev > blog > dark-figure-supply-chain-detection

The dark figure of supply chain detection

1+ week, 5+ day ago   (369+ words) Advanced AppSec suite, built for devs. in-app runtime defense and threat detection. Real-time malware & vuln threats Detection engineering doesn't get that for free. If we don't have a clear, complete picture of what normal package behavior looks like, an unexpected…...

Aikido Security
aikido.dev > blog > popular-code-generator-for-tanstack-query-hit-by-supply-chain-worm

Popular code generator for TanStack Query hit by supply chain worm

2+ week, 2+ day ago   (624+ words) Your Complete Security HQ Advanced AppSec suite, built for devs. in-app runtime defense and threat detection. Real-time malware & vuln threats The malware calls itself "Trinitite: Sponsored by Preview 2 Effects". Trinitite is the glassy material left on the desert floor after…...

Aikido Security
aikido.dev > blog > software-supply-chain-security-decisions-not-defaults

Software Supply Chain Security: Decisions, Not Defaults

2+ week, 4+ day ago   (594+ words) Your Complete Security HQ Advanced AppSec suite, built for devs. in-app runtime defense and threat detection. Real-time malware & vuln threats Every upgrade has the potential to be a supply chain event. A bridge stays in service for fifty years on…...