Aikido
Start for Free
No CC required

Charlie Eriksen

Malware Researcher
Charlie Eriksen is a Security Researcher at Aikido Security, with extensive experience across IT security - including in product and leadership roles. He is the founder of jswzl and he previously worked at Secure Code Warrior as a security researcher and co-founded Adversary.
AI Benchmarking
Aikido Libraries
Data Security
Hardened images
GitHub Security
Mythos
Aikido Device Protection
Aikido Endpoint
Pypi
Secrets
Aikido Zen
IDOR vulnerabilities
IDE Security
Announcements
European Cyber Security
Continuous Pentesting
AI Safety
Self-securing Software
SSDLC
VS Code
AI Penetration Testing
Threat Modeling
Cyber Resilience Act
Triaging
AutoTriage
Pentesting
Bazel
Code Quality
OWASP
NIS2
Legaltech
fintech
RASP
End of Life
SQL Injections
DAST
cnapp
CSPM
ASPM
Infrastructure as a Code IaC
Network Security Monitoring
License Scanners
SBOM
Container Scanning
AppSec
Vulnerabilities
Software Supply Chain Security
API
Dependencies
Continuous Security Monitoring
DevSecOps
Vibe Coding
AI
NPM
autofix
Malware
Article
open-source
SCA
intel
SOC 2
usecase
Tools
SAST
Compliance
CircleCI
Codeship
IMDSv2
Cloud
IMDSv1
SSRF
AWS

Blog posts by Charlie Eriksen

April 10, 2025
•
Vulnerabilities & Threats

The malware dating guide: Understanding the types of malware on NPM

A breakdown of real-world malicious npm packages and the techniques they use to exploit the JavaScript supply chain.

Tags/

#Malware

#Vulnerabilities

April 3, 2025
•
Vulnerabilities & Threats

Hide and Fail: Obfuscated Malware, Empty Payloads, and npm Shenanigans

Investigating a failed npm malware campaign using time-delayed payloads, obfuscation tricks, and reused dependencies.

Tags/

#Malware

#NPM

March 31, 2025
•
Vulnerabilities & Threats

Malware hiding in plain sight: Spying on North Korean Hackers

When a malicious NPMjs package was uploaded, we didn't expect we would be watching the North Korean Lazarus group debug it in real time. But we did/

Tags/

#Malware

Get secure today,
quickly and for free.

Secure your code, cloud, and runtime in one central system.
Connect a repo to discover what the reasoning agents find in your codebase.

Start for Free
No credit card required | Scan results in 32 seconds.
Trusted by 150k+ orgs