2026 · Talk
Install Me Maybe
How a trusted extension ID can resolve to an attacker-controlled package in another marketplace.
Hi, I'm Raphael Silva.
I'm a security researcher at Aikido Security. I spend most of my time investigating malicious packages and attacks on the software supply chain.
You'll find my research and conference talks here, including recordings. I also do freelance pentesting with Ethiack.
Recent research 2025-2026
2025 · Talk
Plugins Gone Rogue
Malicious IDE plugins and the marketplace tricks used to distribute them.
Recent talks
Install Me Maybe
Plugins Gone Rogue
About me
Before Aikido, I worked at Checkmarx, most recently leading supply-chain security research. I studied Engineering and Management of Information Systems at the University of Minho.
[ Work & education ]