aikido.dev
aikido.dev is "supplychain.local": malicious code found in MemTensor's npm plugin (0.1.21, 0.1.23) and PyPI's MemoryOS (2.0.34).. It is ranked #459 on the Vibe Coding Radar, in Code review & safety, first seen 4 days ago and shared in 1 post (3.4k views).
MemTensor npm and PyPI hit by "supplychain.local" malware Solutions Resources About Pricing Contact Login Start for Free Login Menu EN Login Start for Free No CC required Blog Vulnerabilities & Threats Novel supplychain.local Go worm appears Novel supplychain.local Go worm appears Written by Oliver Smith Published on: Sep 23, 2026 Last updated on: Sep 24, 2026 On 23 September 2026, a threat actor published a novel supply chain worm to the following packages: npm: @memtensor/memos-cloud-openclaw-plugin versions >=0.1.21 PyPI: MemoryOS versions >=2.0.34 While our analysis is preliminary, both packages have a substantial benign publishing…
What people said about aikido.dev on X
Coding agents create more changes than teams can review. Most get an LGTM. 🔥 Introducing Deep Review. The independent review layer that analyzes every change before it gets merged. Swarms of agents review every pull request with full context of your codebase. They catch bugs, security issues, and unintended side…
— @AikidoSecurity, 4 days ago · 40 likes · see the post
Alternatives to aikido.dev
- Introducing Vercel CI — Vercel CI is in Beta. It runs only the checks your change affects, on compute sized to the push, using the Turborepo…
- StarSling — You can also send this URL to your agent to get the CI playbooks from Linear, Anthropic, OpenAI, etc
- Claude Code Templates — Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for…
- Weave — Write your team’s code standards as Markdown files and have AI review every pull request against them. Open source and…
- Agent Baseline — Four security boundaries for software factories, where AI agents turn tickets into tested code, enforced outside the…
- cursor.com — Secure what AI writes. Find us on the Cursor marketplace
aikido.dev in numbers
- Rank on the Vibe Coding Radar: #459 of 2616
- Shared in 1 post by 1 account: @AikidoSecurity
- 3.4k views on those posts
- First seen 4 days ago, last shared 4 days ago
- Pricing seen by AGK Intelligence: not stated
- Market: Code review & safety
FAQ
What is aikido.dev?
"supplychain.local": malicious code found in MemTensor's npm plugin (0.1.21, 0.1.23) and PyPI's MemoryOS (2.0.34). It was first shared on X 4 days ago and is ranked #459 on the Vibe Coding Radar.
Is aikido.dev free?
Pricing is not stated on the page we read.
Who shared aikido.dev?
1 account on X, including @AikidoSecurity, in 1 post totalling 3.4k views.
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 7.9k posts from 5k X accounts over the last 14 days, 2.6k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-11-06 19:32 UTC. Full method.