SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack Cybersecurity researchers are sounding the alarm about a new supply chain attack campaign targeting SAP-related npm Packages with credential-stealing malware. According to reports from Aikido Security… #hackernews #news

Introducing Aikido Endpoint Protection. Developer devices have been under attack. In the last few months alone, Shai Hulud, TeamPCP, Axios, and Vercel were all compromised through developer devices. Aikido Endpoint Protection secures everything your devs install before it reaches the device.

We’ve been gatekeeping this for a while… Introducing Snake Oil™ Next-generation fragrance. Purpose-built. Military-grade. Cloud-native. Agentic essence. Compliant. “CISO-approved” in some states. No, we won’t tell you what it costs. Just smell it → aikido.dev/perfume (Results may vary)

Introducing Betterleaks, a new open source secrets scanner built by the original creator of Gitleaks, Zach Rice.

Software can now secure itself. → www.aikido.dev/attack/infin...

Self-securing software is coming to RSAC. Yes, it's Matrix themed.

This is NOT a Super Bowl ad

From “no bullsh*t security” to $1 billion valuation in three years. Announcing $60M Series B at $1B led by Tom Stafford at DST Global. What’s next? Self-securing software. Stay tuned.

feeling ✨ seasonal ✨ meet Jarno -> www.aikido.dev/meetjarno

Turn alert overload into instant clarity. Security Zen awaits.

🚨We just hacked Google’s Gemini CLI, and multiple undisclosed Fortune 500 companies, through prompt injections in GitHub Actions.

What does pentesting look like in the next era of development? Meet Aikido Attack. -> www.aikido.dev/attack/aipen...

Aikido Original now streaming in SF

We’ve been waiting to share this. Aikido SF is now open for business. 🤝 Our middle-out expansion is real.

Honored for protecting 2 billion requests per month. Because apparently, that’s plaque-worthy.

⚡️JUST DROPPED: The State of AI in Security & Development We asked 450 CISOs, AppSec engineers and developers across Europe and the US how AI is changing the way we build and secure software.

Breaking: Allseek and Haicker are joining Aikido Together we’re launching Aikido Attack, autonomous pentests that think like hackers and run in hours, not weeks. We’re entering a new chapter in pentesting and we’re excited to have the teams from Allseek and Haicker with us on this journey.

Did you catch the premiere? → aikido.dev/meetjarno

Here are a few places where Jarno does interviews, the rest are better left offline. But you can always meet him and ask -> aikido.dev/meetjarno

How did we scale from 30 to 140 team members in a year? Simple. Always be recruiting. Have you met Jarno? → aikido.dev/meetjarno

#1 Product of the Day, #3 Developer Tool of the Week. Crushed it.

🍿

Secure everything you build, host, and run. Aikido now launching at #1 on Product Hunt 🔥 Please upvote here → www.producthunt.com/products/aik...

tHe biGGesT sUpplY cHaiN atTAck iN hISTory!!!!!11 safe chain stars went brrr Free to use. Open source.

Le maintainer: “I’ve been pwned. Sorry everyone, very embarrassing.” Brian Krebs covered the npm supply chain compromise, featuring insights from our own @charlieeriksen.bsky.social, who broke the news. Full article → krebsonsecurity.com/2025/09/18-p...

MAINTAINER UPDATE: The maintainer of debug & chalk has taken down the packages and locked down his account; some packages remain affected. The phishing email used to target debug/chalk was 'support [at] npmjs [dot] help'

Update! The goal of the attacker is crypto.

🚨URGENT: A series of popular packages maintained by qix have just been compromised. Compromised packages include: • has-ansi - 12 million weekly downloads - V6.0.1 • supports-hyperlinks - 19m weekly downloads - v4.1.1 • chalk-template - 3.9m weekly downlaods - V1.1.1

In Khachatur’s words: “We didn’t make cars smaller so they could squeeze between trees, we built roads so we could drive them everywhere. AI code generation is the car. Together, we’re building the road.”

Happening this Thursday ❤️‍🔥 We’re back with the next edition of ~all vibes /no vulns. Hosted by our own Mackenzie Jackson, with special guests Igor A. (CISO @ Lovable) and Bil Harmer (CISO @ Supabase). Together we’ll build, hack, and secure an app in real time. Join us → luma.com/lovablexaiki...

The wait is over. Aikido Code Quality is live. Our favorite part? Roast mode. 🥵 Activate at your own risk → aikido.dev/quality

🚨 ALERT: The NPM package NX has been compromised (4.6m weekly downloads) - malicious versions (v20.9–20.12 & 21.5–21.8) were published on Aug 26 2025. The compromised packages have a postinstall script that scans for credentials and post them to the users GitHub account.

Happening TOMORROW. Willem Delbare (CEO & Co-founder, Aikido) and Khachatur V. (CEO & Co-founder, Trag) go live to talk about the future of code review. Quality code is secure code. Let’s talk about it → lu.ma/aikidoxtrag

We merged Trag into Aikido, to build the future of LLM-native code review together. Join Willem Delbare (Aikido) and Khachatur V. (Trag) for a live session on what this merger means, how AI code review is changing, and what’s next with our unified code + security product.

🔒 Security isn’t a checklist, it’s a mindset, built into every step of development. #Aikido helps developers grow by learning secure coding in context; each vulnerability they fix makes them better at preventing the next. 👇👇👇 www.aikido.dev/customer-sto...

Big news: Trag is now part of Aikido AI is writing more code than ever, and developers are stuck reviewing it with tools that were never built for this. Devs deserve better. That’s why we brought Trag into Aikido.

is somebody gonna match my freak

Look, a chart that goes up and to the right. Ground breaking.

Your AI code reviewer arrives 19 Aug 2025. Get early access: aikido.dev/quality

Rolled through Vegas. Until next time. 🧻🫡

Full room at DEF CON 🙌 Our very own Mackenzie took the AppSec Village stage for "AI vs. the APTs" and shared how AI is catching malware, hidden backdoors, and shadow-patched vulnerabilities before anyone else spots them. Appreciate everyone who came through.

And on the eighth day… we created the roll

Devs deserve better. Ship quality code faster with Aikido. Get early access → www.aikido.dev/quality

Cut the crap. New merch is here. 🧻 → theroll.dev

Introducing: The Roll. 🧻✨ We're serving "No Bullsh*t Security" on the Black Hat floor… literally. Get your limited-edition toilet paper roll at #BlackHat booth #6821 while supplies last. Or order yours online 👉 theroll.dev (Yes, we really did.)

AI code review that fixes real issues, not nitpicks. → aikido.dev/quality

Ship quality code, faster. Get early access → aikido.dev/quality

Introducing Aikido SafeChain 🔒⛓️ SafeChain wraps every npm, yarn, pnpm, and npx install. It blocks malware in real time, with zero changes to your workflow. Free. Open Source. Powered by Aikido Intel. Don’t trust your terminal. Defend it.