FreeVisit Website
Tracked since2026
0 reviews trackedThe Bottom Line
Entry price
Free, no paid tier
Biggest pro
Catches risky packages and extensions before they enter your stack
Biggest con
Risk scoring may produce false positives for legitimate but unusual packages
TL;DR - Koidex
- Security tool that checks packages, extensions, and AI models for safety before installation
- Scores risk using static and behavioral signals across npm, VS Code, JetBrains, and Hugging Face
- Free IDE extension scans installed extensions in real time, no setup required
Pricing: Free forever
Best for: Individuals & startups
What is Koidex?
Koidex helps developers check whether packages, browser extensions, and AI models are safe before installing them. It scores risk using static and behavioral signals: permissions, suspicious patterns like obfuscation, dependency and publisher signals, and known bad indicators. Koidex scans across VS Code, JetBrains, npm, and Hugging Face. The IDE extension runs background scans on installed extensions in Cursor, Windsurf, and VSCodium, flagging risky installs in real time. Free with no setup required.
Available on: Web
Pros & Cons
Pros
- Catches risky packages and extensions before they enter your stack
- Covers multiple ecosystems: npm, VS Code, JetBrains, Hugging Face
- Real-time background scanning flags issues without interrupting workflow
- Built by the team that discovered GlassWorm, ShadyPanda, and PhantomRaven attacks
Cons
- Risk scoring may produce false positives for legitimate but unusual packages
- New tool with evolving detection capabilities
- Limited to supported ecosystems, does not cover all package managers
Preview
Key Features
Risk scoring for packages, extensions, and AI models before installStatic and behavioral signal analysis including obfuscation detectionIDE extension for real-time background scanning in Cursor, Windsurf, VS CodeCovers npm packages, VS Code/JetBrains extensions, and Hugging Face modelsPublisher and dependency signal evaluationFree with no setup or account required
Pricing Plans
Pricing checked Jun 17, 2026
Free
Free
- Package and extension risk scoring
- AI model safety checks
- IDE background scanning
- No setup or account required
Reviews
$99Free with your review
Write a reviewReview Koidex, get a free AI guide
Share your experience and we will send you Improve Your Thinking Patterns Using ChatGPT, free.
Best Koidex Alternatives
Top alternatives based on features, pricing, and user needs.
Still deciding?
Most buyers shortlist 2 or 3 tools before committing. Pull a side-by-side comparison or browse the full alternatives shortlist below.
Explore More
Koidex FAQ
How does Koidex help developers ensure package safety?
Koidex assists developers by checking packages, browser extensions, and AI models for safety before installation. It scores risk based on static and behavioral signals, including permissions, suspicious patterns like obfuscation, and known bad indicators.
Which development ecosystems does Koidex support for scanning?
Koidex scans across various development ecosystems, including VS Code, JetBrains, npm, and Hugging Face. Its IDE extension also provides real-time background scans for installed extensions in Cursor, Windsurf, and VSCodium.
How does Koidex compare to Phylum regarding package security?
Koidex, similar to Phylum, focuses on identifying risky packages and extensions before they integrate into a developer's stack. Koidex distinguishes itself by offering real-time background scanning and covering ecosystems like Hugging Face and JetBrains.
What kind of user or team benefits most from Koidex?
Teams and individual developers who prioritize supply chain security and wish to proactively identify risks in their dependencies and extensions will find Koidex most beneficial. It helps prevent risky packages from entering their development environment.
What are the main limitations of using Koidex for security scanning?
Koidex's risk scoring may occasionally produce false positives for legitimate but unusual packages, and its detection capabilities are continuously evolving. It is also limited to its supported ecosystems and does not cover all package managers.
How is Koidex priced?
Koidex is free to use, requiring no paid plan or setup. It provides its security scanning features without any cost.
Can Koidex detect novel or sophisticated attacks?
Koidex is built by the team responsible for discovering significant attacks like GlassWorm, ShadyPanda, and PhantomRaven. This background suggests an expertise in identifying complex threats through its use of static and behavioral signals.
Source: dex.koi.security