Aikido Intel

Track open-source package vulnerabilities and detect malicious code across multiple ecosystems

Pricing model

Free

Rating

★ Mixed Reviews

Time to value

Immediate

You can use Aikido Intel to monitor open-source dependencies for security vulnerabilities and newly discovered malware. The database aggregates threat intelligence across ecosystems like npm, PyPI, Go, and Maven within minutes of discovery. Teams can track CVEs, inspect compromised packages, and research recent software supply chain incidents. You can also connect code repositories to check codebases for vulnerable packages or query threat data through an API to block malicious packages, browser extensions, and developer tools before installation on engineer devices.

What Aikido Intel does

Search open-source packages for known vulnerabilities and CVEsBlock malicious dependencies prior to installationScan code repositories for supply chain threatsQuery the vulnerability intelligence API for package risk dataReview detailed reports on newly discovered malware campaignsTrack real-time security alerts across various programming registriesDetects malicious packages and CVEs across open-source ecosystems within minutesMonitors registries including npm, PyPI, Maven, Go, and Ruby for supply chain attacksBlocks malicious packages, browser extensions, and IDE plugins before installationProvides a commercial threat intelligence API feed for internal security systemsScans code repositories directly to find existing vulnerable or infected packagesPublishes threat research on novel supply chain worms and malicious campaigns