K
Koidex
Koidex helps developers check whether packages, browser extensions, and AI models are safe before installing them.
Our verdict
Who it's for
Securely trade digital assets with a decentralized exchange.
Who should look elsewhere
Risk scoring may produce false positives for legitimate but unusual packages
Pros
- +Catches risky packages and extensions before they enter your stack
- +Covers multiple ecosystems: npm, VS Code, JetBrains, Hugging Face
- +Real-time background scanning flags issues without interrupting workflow
- +Built by the team that discovered GlassWorm, ShadyPanda, and PhantomRaven attacks
Cons
- −Risk scoring may produce false positives for legitimate but unusual packages
- −New tool with evolving detection capabilities
- −Limited to supported ecosystems, does not cover all package managers
Key features
- ✓Risk scoring for packages, extensions, and AI models before install
- ✓Static and behavioral signal analysis including obfuscation detection
- ✓IDE extension for real-time background scanning in Cursor, Windsurf, VS Code
- ✓Covers npm packages, VS Code/JetBrains extensions, and Hugging Face models
- ✓Publisher and dependency signal evaluation
- ✓Free with no setup or account required
Pricing
| Plan | Price | Billing | Notes |
|---|---|---|---|
| Free | $0 | month | Package and extension risk scoring; AI model safety checks; IDE background scanning |