🧰 Aikido Device Protection

The items that name it 20

• Binance hack: how a compromised developer laptop can lead to a $6.3 billion breach
  article2026-10-30

  Lightweight agent on the developer's machine that blocks malicious packages, editor extensions and AI tools before install, holds back packages or extensions published in the last 48 hours by default, and flags already installed items later found malicious.

• Software supply chain security best practices for 2026
  article2026-10-21It is written here as Aikido Device Protection: blocks malicious packages and extensions on developer machines across the organization.
• tensorlake NPM package compromised with Shai Hulud worm
  writeup2026-10-08

  Gives visibility and control over software packages installed on team devices, covering browser extensions, code libraries, IDE plugins, and build dependencies.

• Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack
  writeup2026-08-20

  Gives visibility and control over software packages installed on team devices, covering browser extensions, code libraries, IDE plugins, and build dependencies

• How Aikido Intel detects malware and vulnerabilities first
  article2026-07-13

  Enterprise version of Safe Chain that protects all developer endpoints across an organization.

• What is a dependency firewall?
  article2026-07-13

  Org-level developer firewall covering everything developers install on their machines (IDE extensions, browser extensions, MCP servers, AI coding tools); deploys through existing MDM (e.g. Jamf, Kandji, Fleet); runs on Aikido Intel; gives security teams centralized visibility across every workstatio

• Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry
  writeup2026-07-09

  Gives visibility and control over software packages installed on team devices, covering browser extensions, code libraries, IDE plugins, and build dependencies.

• Everybody's shipping code they can't read
  article2026-06-25

  Catches a bad package at the moment before it installs, blocking malicious packages before they hit the machine

• Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets
  writeup2026-06-24

  Gives visibility and control over software packages installed on team devices, covering browser extensions, code libraries, IDE plugins, and build dependencies

• Over 140 popular Mastra npm Packages Hit by Supply Chain Attack
  writeup2026-06-17

  Gives visibility and control over software packages installed on team devices, covering browser extensions, code libraries, IDE plugins, and build dependencies

• Multiple JetBrains IDE plugins caught stealing AI keys
  writeup2026-06-16

  Gives visibility and control over software packages installed on team devices, covering browser extensions, code libraries, IDE plugins, and build dependencies.

• SBOMs in 2026: Everyone's generating them, no one's using them
  article2026-06-10

  Endpoint protection deployed on build servers and developer machines to inventory tools/runtimes/packages, flag outdated or vulnerable ones, and assess trustworthiness of the build environment

• Compromised Rust crate onering performs code exfiltration
  writeup2026-06-10

  Gives visibility and control over software packages installed on team devices, covering browser extensions, code libraries, IDE plugins, and build dependencies

• Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System
  writeup2026-06-09

  gives visibility and control over software packages installed on team devices, covering browser extensions, libraries, plugins, and dependencies

• Why EDR and proxy won’t save you from supply chain malware
  article2026-06-02

  On-device tool built by Aikido that understands what packages are doing at install time, always present regardless of network configuration

• Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
  writeup2026-06-01

  gives visibility and control over software packages installed on team devices, covering browser extensions, code libraries, IDE plugins, and build dependencies

• What MDM can't protect on developer machines (and what to do about it)
  article2026-05-28

  Deploys through existing MDM; covers package registries, IDE extensions, browser plugins, and AI tool marketplaces; enforces 48-hour minimum package age policy and blocks malicious installs

• The Wild West of VS Code extensions and how a poisoned extension breached GitHub
  article2026-05-20

  Enforces a configurable minimum-age (default 48-hour) hold on new package and extension versions at the device level before allowing install, across any VS Code-based editor; would have caught the Nx Console and durabletask compromises.

• GitHub breached via a malicious VS Code extension: why developer devices are the real target
  article2026-05-20

  On-device agent protecting against threats from packages, extensions, and AI tooling like MCP servers; combines real-time malware blocking and minimum age blocking, released earlier that Spring

• AikidoSec/safe-chain
  repoIt is written here as Aikido Device Protection: builds on Safe Chain; adds centralized policy management, request-and-approval workflows and workstation visibility; deployable manually or via MDM (Jamf, Fleet, Iru).

  Jamf, Fleet, Iru