# Malware Monitor Report

The [Malware Monitor](https://app.aikido.dev/reports/malware/software-supply-chain-attacks) gives you visibility into malicious packages published in public registries and shows whether they affect your environment.

Aikido continuously compares your dependencies against a live feed of known malicious packages across ecosystems such as npm, PyPI, NuGet, Maven, RubyGems, VS Code extensions, and more.

If a malicious package is detected in your projects, you are alerted immediately. Use [Safe-Chain to block Malware](https://help.aikidogov.us/code-scanning/aikido-malware-scanning) from getting installed on your machines.

<figure><img src="https://help.aikidogov.us/_assets/bc554090da5e/Screenshot-2026-02-12-at-14.06.59.png" alt=""><figcaption></figcaption></figure>

## When to use this report

Use the Malware Monitor when you need to:

* Detect malicious open source packages before they cause damage
* Respond to supply chain incidents
* Demonstrate protection against dependency based attacks
* Monitor newly published threats in public registries
* Reassure customers about third party risk

This report focuses specifically on intentional malware, not regular vulnerabilities.