Koi is a security research and software supply-chain monitoring firm focused on developer tooling ecosystems. It recently disclosed namespace-hijacking risks in the OpenVSX registry used by AI-enhanced forks of Visual Studio Code, helping protect users from malicious extensions.