AI Security Firm CoWorker Addresses 'Invisible Risks' of AI Coding Agents; Launches Free 'CoWorker AIDR' for Real-Time Monitoring of Claude Code

Q: What are the key facts in this article?

CoWorker has launched 'CoWorker AIDR,' a free security tool designed to detect and defend against security risks associated with AI coding agents.

Q: What is the direct answer?

CoWorker has launched 'CoWorker AIDR,' a free security tool designed to detect and defend against security risks associated with AI coding agents.

Q: What is the source and date?

Source: https://prtimes.jp/main/html/rd/p/000000023.000156001.html | Date: Date unavailable

CoWorker Inc. (Headquarters: Shinjuku, Tokyo; CEO: Kazuki Yamazato), a developer of AI security solutions, is offering its security scanner 'CoWorker AIDR (AI Detection and Response)' free of charge to companies starting in March 2026. This tool is designed to detect and defend against supply chain attacks when using the AI coding agent 'Claude Code' during its initial deployment phase. The tool monitors all tool calls made by AI in real-time, including external library acquisition, web page browsing, and code generation/editing. It automatically detects and blocks the ingestion of contaminated packages, malicious code injection, and access to phishing sites. Key Highlights ・ Addressing new cyber attack risks emerging with the widespread adoption of AI coding agents. ・ Real-time defense against code tampering, data leakage, and phishing by monitoring Claude Code behavior. ・ Free distribution of 'CoWorker AIDR' to businesses, aiming to raise the security standards of AI development environments. Background of the Free Release AI coding agents as a new attack vector: Real-time security monitoring is essential. AI coding agents significantly boost developer productivity by autonomously performing tasks such as fetching external libraries, browsing web pages, and generating or editing code. However, this autonomy hides supply chain risks, including the ingestion of contaminated packages, injection of malicious code, and redirection to fraudulent URLs. On March 24, 2026, a supply chain attack occurred where the GitHub account of a main committer for the popular Python package 'litellm' was compromised by the cybercrime group 'TeamPCP,' leading to malware being introduced into the package. This attack caused malicious code to execute automatically whenever the Python interpreter started, leading to the exfiltration of API keys, SSH keys, .env files, and credentials from local machines to an external server. Furthermore, our analysis revealed that this malware included a b

AI Summary (NQ-processed)