Aikido Security (aikido.dev)
aikido-security · B · active
Software supply-chain / IDE-security research; primary source for the 2026-06-16 JetBrains Marketplace malicious-plugin disclosure (brief 2026-06-18 §3). Discovered via that item. Candidate; promote to active after 3 runs with content contribution. | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → webfetch https://www.aikido.dev/blog (listing) then webfetch each /blog/<slug> article. AVOID: Nothing to avoid; WebFetch works on listing and articles.. | 2026-07-05 admiralty audit: B (MEDIUM->B), original supply-chain/vuln research (own telemetry); stays active, no change. | 2026-10-14 intel run: recipe: extract of the blog index strips hrefs and dates; `url https://www.aikido.dev/blog` returns the raw HTML with /blog/<slug> links, then extract each post (its date field is reliable). | 2026-10-22 (S1): confirmed: `url --direct <listing>` plus a regex on href="/blog/<slug>" enumerates posts; `extract <post URL>` dates are reliable.
Cited in 9 entries
Citation cadence
Citation days per ISO week (25 weeks of coverage span, total 8).
- LiteLLM 1.107.0: the PyPI wheels and the official Docker images carried a credential stealer and a dormant remote-code loader that Python starts at every launch, published through the maintainers' own release workflow with stolen developer tokens2026-10-22
- npm supply-chain payload hides as runtime 'telemetry' with no install hook, defeating install-time dependency scanners2026-07-10
- 15 malicious JetBrains Marketplace plugins exfiltrate AI provider API keys on "Apply"2026-06-18
- CVE-2026-48611 / CVE-2026-48612: phpBB authentication bypass gives a session as any user from one unauthenticated request, plus an OAuth account-link CSRF2026-06-16
- "Miasma" worm backdoors 32 Red Hat Cloud Services npm packages via OIDC trusted-publishing abuse2026-06-02
- Packagist supply-chain wave: Laravel-Lang autoloader backdoor and the cross-ecosystem postinstall strand2026-05-24
- Deleted Google Cloud API keys keep authenticating for up to 23 minutes2026-05-24
- CVE-2026-46300, Linux kernel: local privilege escalation via xfrm ESP-in-TCP ("Fragnesia"), listed by CISA as exploited and chained with the PHP2Shell flaws to reach root, PoC public2026-05-15
- CVE-2026-43284 / CVE-2026-43500 Linux Dirty Frag: deterministic page-cache write to root through xfrm-ESP and RxRPC, public exploit, fixes released2026-05-09