Overview
News
Technologies
Salaries
Products
People
Growth
Financials
Overview
Koi gives security teams full visibility & control over extensions, packages, and more. Detect risks, enforce policy, and protect endpoints.
News
ClawHavoc: 341 Malicious Clawed Skills Found by the Bot They Were Targeting
We audited all 2,632 skills on ClawHub and found 341 were malicious - 335 from a single campaign we're calling ClawHavoc. The attack exploits the trust between AI bots and their users, tricking them into installing infostealers disguised as legitimate too
Read more
Report
Malicious VS Code AI Extensions Harvesting Code from 1.5M Devs
Two popular AI coding extensions with 1.5M installs secretly harvest your entire codebase and profile you. Both are still live in the marketplace.
Read more
Report
PackageGate: 6 Zero-Days in JS Package Managers But NPM Won't Act
We found 6 zero-day vulnerabilities in npm, pnpm, vlt, and Bun that bypass --ignore-scripts and lockfile protections. Five patched. npm closed the report.
Read more
Report
How We Prevented Cursor, Windsurf & Google Antigravity from Recommending Malware
Discover how we blocked Cursor, Windsurf, and Google Antigravity from recommending malware with advanced security measures.
Read more
Report
DarkSpectre: Unmasking the Threat Actor Behind 8.8 Million Infected Browsers
Unmasking DarkSpectre: Discover the threat actor behind 8.8 million infected browsers and how to protect your data.
Read more
Report
Pro access
Upgrade to see all 14 mentions
Upgrade to a paid plan to read every media mention of this company - funding news, awards, product launches and press releases from all the outlets writing about it.
Every media mention and press release
Funding news, awards and product launches
Fresh coverage from every outlet writing about the company
Upgrade now
Cancel anytime. Secure checkout. Instant activation.