Codacy Now Detects Malicious Packages like Shai-Hulud 2.0
In recent weeks, we’ve witnessed a wave of sophisticated supply chain attacks where npm packages were compromised, most notably the Shai-Hulud 2.0...
04/12/2025
Codacy's New AI Risk Hub and AI Reviewer Bring Order to the Wild West of AI Code Compliance
The widespread adoption of AI coding tools is starting to feel like a 'Wild West' for devs, engineering leaders and compliance officers alike. With 41%...
30/10/2025
Benchmark The Risk Profile of Your AI Coding Posture
Developers have fully embraced AI coding tools, and they are not planning to let go. They ship more, debug faster, and automate the tedious parts of...
23/10/2025
Cut Through the Noise: Introducing Smart False Positive Triage
Every developer has been there: You push your code, the scanner runs, and your PR checks light up with new alerts. You instinctively know you are not...
10/10/2025
Codacy Integrates OSSF Scorecard for True Supply Chain Confidence
In modern software development, we run on open-source. It’s the engine of innovation, allowing teams to build faster, smarter, and more efficiently....
28/08/2025
Codacy Guardrails is now available for Jetbrains IDEs
If you use a JetBrains IDE like IntelliJ IDEA, you can now leverage Codacy Guardrails' real-time feedback and AI-aware safeguards.
.svg)
.png?width=1740&height=450&name=Feature_MaliciousPackage-Blog%20(1).png)
