#36 - Supply chain protection, Enterprise Code Quality, and Stronger secrets detection
19 Sep 2025
#Features
- Prevent malware with Aikido Safe Chain: Protect yourself from JavaScript supply chain disasters with Aikido’s package manager protection. Block malware before they reach your machine, powered by Aikido Intel threat feed.
- Code Quality for Cobol, Visual Basic, ABAP and Pascal: Aikido now flags COBOL paragraphs that sprawl without structure, ABAP custom code that bypasses naming standards, deeply nested Pascal logic and other common code quality mistakes. Helping you reduce long-term maintenance and security risks.
- Secrets Detection Upgrade: Aikido’s secret scanning is now far more accurate, with fewer false positives and fewer false negatives. Check out our blog post for a deep dive into how our detection works.
#Aikido Intel - Malware & Vulnerability Database
Our research team has discovered over #48 new vulnerabilities over the last two weeks! This was a busy month for npm attacks. Aikido Intel discovered the chalk/debug attack (the largest in history), the Shai-Hulud attack (breakdown here), and the S2ngularity NX campaign from the same threat actor.
#Improvements
- Cloud - Added Azure GovCloud support
- Domains & API’s - Exclude and add additional subdomains from Attack Surface scanning
- Domains & API’s - It’s now possible to review leaked passwords
- Zen Firewall - Agent releases for Dotnet, Java, Python, PHP, Ruby and Node
- Safe Chain - Added support for
pnpm i - IDE - New releases for VSCode, Jetbrains and Visual Studio
- Reports - New insights into SLA compliance and remediation speed
- Integrations - Added Secureframe
- API - Added rate limits to limit abuse
- API - Added endpoint to configure header authentication for API scans
- API - Added endpoint to upload OpenAPI / Swagger spec