AI coding agents are installing packages no one owns
AI coding agents are increasingly installing software packages without clear accountability, exposing organizations to security risks. Aikido Security aims to address this issue by providing tools that monitor and secure package installations. The lack of defined ownership over AI agent actions is a growing concern for security teams across various industries.
- ▪Willem Delbare of Aikido Security highlights the accountability gap in AI package installations.
- ▪Aikido Endpoint offers real-time monitoring and policy enforcement to secure AI-native software development workflows.
- ▪The AI security landscape includes various companies like Socket and Endor Labs, each addressing different aspects of package security.
Hacker News (AI / LLM) files mainly under ai. We currently carry 3,270 of its stories.
Story provenance
Source · retrieval · rights · ranking — open for full record
inspect →
Story provenance
Attribution is not the same as permission. This drawer separates discovery metadata, excerpts, WeSearch-generated summaries, reuse status, and whether the publisher receives the visit. Nothing here claims a legal grant the publisher has not made.
Record
| Original publisher | The New Stack |
| Canonical URL | https://thenewstack.io/aikido-ai-agents-security/ |
| Publication time | Wed, 27 May 2026 19:39:42 +0000 |
| Retrieval time | 2026-05-27T19:58:03.915Z |
| Last seen | 2026-05-27T19:58:03.915Z |
| Headline source | Publisher (no WeSearch rewrite) |
| Excerpt source | publisher body |
| Excerpt method | First ~120 words (~800 chars) of extracted publisher body, fair-use limited. |
| Summary | WeSearch · cerebras-chat (WeSearch summarizer) |
| Summary source text | contentText |
| Citation coverage | Summary is a WeSearch-generated derivative; primary citation is the original publisher URL. |
| Cluster | IazqRt_niINc |
| Cluster logic | Grouped by semantic title/content similarity across sources within a rolling window. Same-publisher template collisions are excluded from coverage comparison. |
| Ranking reason | Story pages are not engagement-ranked. Hub feeds use recency, with optional source-diversified chronological ordering (cap consecutive stories per source). No personalized ranking. |
| Publisher visit | Yes — open original |
| Substitutes article? | No — link-out required for full text |
Rights status (four layers)
WeSearch handling by dimension
| Indexing | May the item be indexed (stored, ranked, made findable)? | Allowed |
| Snippet | May a short excerpt of the publisher's text be shown? | Allowed |
| AI summary | May WeSearch generate its own short summary of the article? | Limited |
| Retrieval / RAG | May the content be exposed for third-party retrieval-augmented generation? | Not asserted |
| Model training | May the content be used to train AI models? | Not asserted |
| Commercial reuse | May the content be reused commercially? | Not permitted |
Basis: Derived from the published RSS/Atom feed. Contact: [email protected]. Reviewed: 2026-07-24.
Opening excerpt (first ~120 words) tap to expand
“There is no accountability.” It’s how Willem Delbare, co-founder, CTO, and CEO of Aikido Security, describes to The New Stack situations in which an AI agent installs a package and nobody has decided who should be responsible for it. It exposes enterprises to all manner of attacks as people across the org — marketing, sales, product — use AI. At most companies right now, no one has made the decision, and no one owns the risk. There’s a gap that has opened up, allowing attacks to slip through, Delbare says. That is the gap Delbare says his Aikido Security is trying to close. As AI coding agents like Claude Code, GitHub Copilot, and Cursor increasingly pull packages, add dependencies, and install tools autonomously, security teams are flying blind.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at The New Stack.
Discussion
0 commentsMore from The New Stack
