failRisk: Vulnerabilities

Scanned:

Kilo Code: AI Coding Agent, Copilot, and Autocomplete

Artifact:

latest

Open Source AI coding agent that generates code from natural language, automates tasks, and runs terminal commands. Features inline autocomplete, browser automation, automated refactoring, and custom modes for planning, coding, and debugging. Supports 500+ AI models including Claude (Anthropic), Gem

License: Permissive (MIT)

New!

Published:

Publisher: kilocode

Visit GitHub

See on Visual Studio Code

SAFE Assessment

Compliance

Licenses

1 weak copyleft linked components

Secrets

1 web service credentials found

Security

Vulnerabilities

19 severe vulnerabilities exploited

Hardening

3 baseline mitigations missing

Threats

Tampering

1 components with malware history

Malware

No evidence of malware inclusion

INCIDENTS FOR THIS VERSION:

Overview issues26 vulnerabilities49 malware0 behaviors397 dependencies38 contributors1 versions456

Spectra Assure analysis detects 4 more components

Learn more about Spectra Assure

Below is the list of direct dependencies declared by the software package through its manifest.

Name

Version

@anthropic-ai/sdk

^0.39.0

@kilocode/kilo-gateway

workspace:*

@kilocode/kilo-i18n

workspace:*

@kilocode/kilo-indexing

workspace:*

@kilocode/kilo-memory

workspace:*

workspace:*

workspace:*

workspace:*

workspace:*

workspace:*

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.

Kilo Code: AI Coding Agent, Copilot, and Autocomplete

SAFE Assessment

Compliance

Security

Threats

IMPORTANT: This package had 145 malicious incidents in versions published within 2 years prior to the latestLatest version with malware incident detected: about 4 hours agoVersion: 7.5.14

INCIDENTS FOR THIS VERSION:

Did you know...