Aikido Intel
Named by 17 kept items in this workspace.
16 items name it under tools and 1 under classification.key entities.
Search every workspace for Aikido Intel. It matches the name as written, so it can find other things that share it.
The items that name it 17
Flags known malicious packages; already flags gocommunity.io/orderedbtree and gogets.dev/btreex as malware and alerts if they appear in a dependency tree
Independently detects and confirms vulnerabilities without waiting on vendor advisories or CVE numbers; flagged Stylesmuggler independently, tracked it under three separate entities; in its first year of operation, 67% of packages it found vulnerabilities in were never publicly disclosed to any data
Threat intelligence feed that tracks active exploits and zero-days before a CVE is assigned; rated StyleSmuggler critical with entries AIKIDO-2026-248927 (Magento Open Source), AIKIDO-2026-123768 (Adobe Commerce), AIKIDO-2026-724507 (Magento Cloud metapackage), documenting injection point and trigge
Reads upstream changelogs and commit history to catch vulnerabilities quietly patched upstream without a CVE, feeding Aikido's patching coverage.
Real-time feed tracking both malware and vulnerabilities across open-source ecosystems, powering Aikido SCA.
Threat intelligence service documenting the acceleration of AI-assisted supply chain attack campaigns, cited as tracking more campaigns, more packages, and AI used at every stage of the attack pipeline
real-time feed tracking this vulnerability and other WordPress core issues from the same release; reads new open-source releases and surfaces vulnerabilities and malware within minutes, often before public CVE databases; open and free at intel.aikido.dev, available under an open-source license and v
Real-time supply chain intelligence feed that detects both malware and undisclosed vulnerabilities across open-source ecosystems; monitors more than four million packages across ecosystems including npm, PyPI, GitHub Actions, Packagist, Ruby, VS Code, Open VSX, JetBrains, Visual Studio, NuGet, Maven
Threat intelligence feed analyzing new package versions across 20+ ecosystems in real time; analyzes up to 100,000 malicious packages a day (up from ~20,000 a year ago); in Q2 2026 analyzed ~7.5 million package versions and confirmed 19,500 malicious; flags most in an average of six minutes; runs fo
Threat/malware intelligence feed that flags malicious package versions; CC-BY licensed and public at intel.aikido.dev; powers malware blocking in Composer
Data source used by Safe Chain to check packages before install
Analyzes over 100,000 suspicious projects per day; underlying intelligence engine for Aikido Device Protection
Community/detection capability that helped catch the backdoored Nx Console extension quickly
Threat intelligence source Aikido Safe Chain checks packages against before allowing install
Open source security project by Aikido, listed alongside Betterleaks.
All technologies in this workspace.