Aikido
Start for Free
No CC required

Charlie Eriksen

Malware Researcher
Charlie Eriksen is a Security Researcher at Aikido Security, with extensive experience across IT security - including in product and leadership roles. He is the founder of jswzl and he previously worked at Secure Code Warrior as a security researcher and co-founded Adversary.
Threat Modeling
Cyber Resilience Act
Triaging
AutoTriage
Pentesting
Bazel
Code Quality
OWASP
NIS2
Legaltech
fintech
RASP
End of Life
SQL Injections
DAST
cnapp
cspm
aspm
Infrastructure as a Code IaC
Network Security Monitoring
License Scanners
SBOM
Container Scanning
AppSec
Vulnerabilities
Software Supply Chain Security
API
Dependencies
Continuous Security Monitoring
DevSecOps
Vibe Coding
AI
NPM
autofix
Malware
Article
open-source
SCA
intel
SOC 2
usecase
Tools
SAST
Compliance
CircleCI
Codeship
IMDSv2
Cloud
IMDSv1
SSRF
AWS

Blog posts by Charlie Eriksen

April 10, 2025
•
Vulnerabilities & Threats

The malware dating guide: Understanding the types of malware on NPM

A breakdown of real-world malicious npm packages and the techniques they use to exploit the JavaScript supply chain.

Tags/

#Malware

#Vulnerabilities

April 3, 2025
•
Vulnerabilities & Threats

Hide and Fail: Obfuscated Malware, Empty Payloads, and npm Shenanigans

Investigating a failed npm malware campaign using time-delayed payloads, obfuscation tricks, and reused dependencies.

Tags/

#Malware

#NPM

March 31, 2025
•
Vulnerabilities & Threats

Malware hiding in plain sight: Spying on North Korean Hackers

When a malicious NPMjs package was uploaded, we didn't expect we would be watching the North Korean Lazarus group debug it in real time. But we did/

Tags/

#Malware

Get secure for free

Secure your code, cloud, and runtime in one central system.
Find and fix vulnerabilities fast automatically.

Start for Free
No CC required
Book a demo
No credit card required |Scan results in 32secs.