Koidex

In plain words

Koidex is a security tool that checks whether packages, extensions, and AI models are safe to install. It searches across VS Code, JetBrains, npm, and Hugging Face, and offers an IDE extension for real-time scanning in Cursor and Windsurf. The tool is designed for developers who need quick safety assessments before installing code dependencies and is available free without requiring setup.

written from the facts on this page · September 2026

From the sources

Koidex helps you answer one question fast: "Is this safe to install?". Search extensions, code packages, and AI models across VS Code, JetBrains, npm, and Hugging Face. You can also install the Koidex IDE extension for real-time background scanning in Cursor and Windsurf. Free, no setup.

Quickly detect and eliminate risks in any software your teams rely on - extensions, packages, apps, and models.

• 
  VSCan - Detect Malicious VSCode Extensions2025 · vscan.dev · ▲52

  Did you know that VSCode extensions run with full access to your system—including file system, network, and credentials? Worse, dozens of malicious extensions have already made it into the marketplace, silently compromising devices. I am a security researcher and student developer who ran into this problem myself. To help tackle this, I built a 100% free tool (no login required) that scans VSCode (and Cursor/Windsurf) extensions for: - Hidden malware and obfuscated code - Dangerous permissions and API misuse - Vulnerable dependencies and suspicious network connections Users have already…

• 
  KodusOct 2025 · kodus.io · ▲145

  Hey everyone, Just wanted to share a quick update we just launched at Kodus. For those who don’t know it yet, Kodus is a code review agent that runs directly in your team’s Git workflow (GitHub, GitLab, Bitbucket… and now Azure DevOps as well). It helps maintain code quality and consistency by analyzing each PR based on your team’s own rules and repository standards. Support for Azure had been a common request — so if your team uses it, you can now plug Kodus right into your workflow and give it a try. Docs: https://docs.kodus.io/how_to_use/en/overview Repo:…

• 
  Korey Coding Agent HandoffsDec 2025 · korey.ai · ▲92

  Korey is the AI orchestration agent that connects your tools, conversations, and code — so your team always knows what to ship next.

• 
  Safety Check (KOR v0.5.1)2022 · ▲61

  Introducing your one & only safety check model

• 
  Checkmarx Developer Assist for AI IDEsJan 2026 · dev.checkmarx.com · ▲36

  Security linter for vibe coding: fix vulns as you build

• FL
  Free local security checks for AI coding in VSCode, Cursor and Windsurf2025 · ▲43

  Hi HN! We just launched Codacy Guardrails, an IDE extension with a CLI for code analysis and MCP server that enforces security & quality rules on AI-generated code in real-time. It hooks into AI coding assistants (like VS Code Agent Mode, Cursor, Windsurf), silently scanning and fixing AI-suggested code that has vulnerabilities or violates your coding standards, while the code it’s being generated. We built this because coding agents can be a double-edged sword. They do boost productivity, but can easily introduce insecure or non-compliant code. One recent research team at NYU found that 40%…

• 
  /dev/null▲468

  a social network for devs

  Dev tools · 2d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 22d ago · openbot.run

• 
  Talanoa▲340

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 27d ago · corespeed.io

• 
  Rork Max▲1,428

  Best AI for iOS apps. Website that replaces Xcode

  Life & fun · Feb 2026 · rork.com

• 
  happycapy▲1,365

  The agent-native computer, for the rest of us

  AI · Feb 2026 · happycapy.ai

• 
  SuperX▲897

  All-in-one growth OS for serious 𝕏 creators

  AI · Feb 2026 · superx.so

• 
  KiloClaw▲868

  Hosted OpenClaw. No Mac mini required.

  Dev tools · Feb 2026 · kilo.ai

• 
  Lovon AI Therapy▲801

  Feel closer and have more fun with your partner every day!

  AI · Feb 2026 · lovon.app

• 
  I spent 3 years reverse-engineering a 40 yo stock market sim from 1986▲721

  Hello my name is Ben Ward for the past 3 years I have been remastering the financial game Wall Street Raider created by Michael Jenkins originally on DOS in 1986. It has been a rough journey but I finally see the light at the end of the tunnel. I just recently redid the website and thought maybe the full story of how this project came to be would interest you all. Thank you for reading.

  Work · Feb 2026 · wallstreetraider.com