Aikido
Start for Free
No CC required

Hunter Schwartz

Security Engineer
AI Benchmarking
Aikido Libraries
Data Security
Hardened images
GitHub Security
Mythos
Aikido Device Protection
Aikido Endpoint
Pypi
Secrets
Aikido Zen
IDOR vulnerabilities
IDE Security
Announcements
European Cyber Security
Continuous Pentesting
AI Safety
Self-securing Software
SSDLC
VS Code
AI Penetration Testing
Threat Modeling
Cyber Resilience Act
Triaging
AutoTriage
Pentesting
Bazel
Code Quality
OWASP
NIS2
Legaltech
fintech
RASP
End of Life
SQL Injections
DAST
cnapp
CSPM
ASPM
Infrastructure as a Code IaC
Network Security Monitoring
License Scanners
SBOM
Container Scanning
AppSec
Vulnerabilities
Software Supply Chain Security
API
Dependencies
Continuous Security Monitoring
DevSecOps
Vibe Coding
AI
NPM
autofix
Malware
Article
open-source
SCA
intel
SOC 2
usecase
Tools
SAST
Compliance
CircleCI
Codeship
IMDSv2
Cloud
IMDSv1
SSRF
AWS

Blog posts by Hunter Schwartz

September 1, 2026
•
News

The dark figure of supply chain detection

String-based rules only catch malware that's already been seen. Behavioral detection is how you find the supply chain attacks.

Tags/

#Software Supply Chain Security

July 9, 2026
•
Vulnerabilities & Threats

Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry

A malicious release of @injectivelabs/sdk-ts hid a wallet-key stealer inside code labeled as usage telemetry, then spread it across 17 more npm packages. Here's how it worked and how to check your projects.

Tags/

#Malware

#open-source

June 24, 2026
•
Vulnerabilities & Threats

Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets

codfish/semantic-release-action was compromised on June 24, 2026. Attackers repointed v2–v5 tags to a Miasma credential-stealing payload targeting CI/CD secrets. Here's what happened and how to check if you're affected.

Tags/

#open-source

#Malware

Get secure now

Secure your code, cloud, and runtime in one central system.
Find and fix vulnerabilities fast automatically.

Start Scanning
Book a demo
No credit card required | Scan results in 32secs.