Skip to content
Docs
Changelog

Changelog

dazio --version prints the version you have. Install covers upgrading. Each version’s downloads are on the Dazio releases page.

v0.1.25 - 2026-10-15

Improved

  • Installed packages are rescanned every 15 minutes instead of every hour.
  • A package installed globally with npm, pip, cargo or NuGet is checked against the malware feed within seconds, instead of waiting for the next package rescan.
  • A package installed through safe-pkg that the malware feed flags shortly afterwards is reported as soon as the feed updates, instead of at the next package rescan.

Fixed

  • safe-pkg no longer breaks uv older than 0.9.23: while such a uv is installed, it stays out of uv.toml and removes what it had written there.

v0.1.24 - 2026-10-15

New

  • IDE extensions are now checked in every VS Code-family editor: VS Code Insiders, VS Code Server, VSCodium, Cursor and Windsurf remote servers, Trae, Kiro, Positron and Antigravity. Each extension is reported under the editor that holds it.
  • Skills installed with the ClawHub CLI or OpenClaw are checked against the malware feed by publisher, name and installed version.
  • Skills bundled in Claude Code plugins are checked against the malware feed by the publisher of the repository the plugin came from.
  • Skills installed with npx skills are checked against the malware feed by the repository they were installed from.
  • Many more AI coding agents are detected, with their versions: Junie, Hermes, Kiro CLI, OpenClaw, Pi, Mistral Vibe, Letta Code, Cline CLI, Continue (cn), OpenHands, Qwen Code, goose, CodeBuddy Code, Kilo, Crush, Amp, Kimi Code, Freebuff, Droid, Devin CLI and Grok CLI. Their skills and MCP servers are checked too.
  • Scans now list AI desktop apps and IDEs: Claude Desktop, ChatGPT, Codex, Antigravity, Warp, Goose, OpenClaw, Zed, VS Code, VS Code Insiders, Cursor, Windsurf, Kiro, Trae and Tabnine.
  • An agent home moved by an environment variable in your shell config (zsh, bash, fish or PowerShell) is scanned alongside the default one. Dazio reads those files; it never runs your shell.
  • Agents installed with bun, pnpm, yarn, Nix, dpkg or pacman are found, with their versions.
  • Skill folders listed in Hermes, OpenClaw and Mistral Vibe configs are checked.
  • LM Studio MCP servers are read, and the newer Antigravity and Cline MCP config locations are followed.
  • On Windows, Dazio now scans and protects your WSL distros from Windows, with nothing to install inside them. WSL2 distros need mirrored networking for install checks; dazio status names any distro left out.

Improved

  • A skill is checked against the malware feed by its publisher and install folder, not only by the name it declares. Skills under Gemini, Kiro, Copilot, Windsurf and opencode are now labelled with their agent.
  • Agents are found and versioned from what is installed on disk, without running them.
  • A skill in a folder several agents read is listed under each of those agents.
  • A malicious skill is reported once per folder, naming every agent that reads it.

Fixed

  • IDE extensions that were uninstalled but not yet deleted from disk are no longer reported.
  • A full scan reports each pip configuration finding once instead of twice.

v0.1.22

This release and earlier ones shipped without notes.

FAQ