#33 - NodeJS Safe-chain, Hardened Libraries, and Visual Studio AutoFix + Dependency Scanning

22 Jul 2025

Features

• NodeJS Safe-chain: Aikido Safe Chain protects your environment from malware by creating a security wrapper around Node package managers, preventing dangerous dependencies from entering your supply chain.

• Hardened Libraries: End-of-life dependencies causing you pain? Avoid painful upgrades, risky breaking changes, and weeks of wasted engineering time with Aikido’s hardened libraries, powered by our partnership with Tuxcare.

• Visual Studio enhancements + RustRover support: Aikido for Visual Studio now features powerful AutoFix capabilities and comprehensive dependency scanning. We’ve also added full support for JetBrains RustRover.

Aikido Intel - Malware & Vulnerability Database

Our research team has discovered over #42 new vulnerabilities over the last two weeks! Learn more about Safe-chain and how it can help protect your environment in our latest blogpost Stopping Malicious npm Packages Before They Wreck Your Project.

Improvements

• Aikido Intel - Added PHP, Ruby and Github Actions to Malware scanning

• Domains & API's - Improved Aikido AI with more languages, increased accuracy and speed.

• Domains & API's - Added Settings tab which combines all configuration options on one page

• Domains & API's - ⚠️ New IP's have been added for an upcoming feature

• Zen - Added option to Country block entire continents

• Zen - Agent releases for Python, Java, Node and PHP

  • Node - Added rate limit by group instead of user

• Reports - Trends over time is exportable to CSV

• IDE - Releases for VSCode, Visual Studio and Jetbrains

• Selfscan - Option to export SBOM locally --output-cyclonedx-json

• API - Added webhook for CI Gate passed

• API - Added webhook when an issue is closed

• API - Endpoint to overwrite licenses

• API - Change tag filter of a container