Aikido Security's Blog · Scour

Microsoft's Durabletask Package on PyPI Compromised. Mini Shai Hulud

aikido.dev··Hacker News

Mini Shai-Hulud strikes again: npm worm compromises hundreds of @antv packages

Penetration testing vs. red teaming: what’s the difference?

Opengrep SAST After One Year: Faster, Deterministic Static Analysis

Why shadow AI risks start with fear (and banning makes them worse)

Mini Shai-Hulud Is Back: NPM Worm Hits over 160 Packages, Including Mistral

aikido.dev··Hacker News

The complete GitHub Actions security checklist

Top OWASP scanners in 2026 for web application security

Rolling out developer security in a 5,000+ engineer organization

Security metamorphosis: a Mythos-ready architecture checklist for autonomous AI attacks

Why browser extensions are a major security risk and what you can do about it

Popular PyTorch Lightning Package Compromised by Mini Shai-Hulud

Aikido integrates with AWS Kiro: Catching in review doesn't scale anymore

Top CVE Scanners in 2026: Compared by Coverage, Intelligence, and Auto-Fix

A practical CTO security checklist to be Mythos-ready

NPM supply-chain attack is targeting the SAP developer ecosystem

aikido.dev··Hacker News

Four published versions of a fake "tanstack" package uploaded in 27 minutes that want to steal your .env files

It's time to treat browser extensions like supply chain attack vectors | Lessons learned from the Vercel breach

Is Shai-Hulud Back? Compromised Bitwarden CLI Contains a Self-Propagating npm Worm

GPT-Proxy Backdoor in NPM and PyPI Turns Servers into Chinese LLM Relays

aikido.dev··Hacker News

Log in to enable infinite scrolling