🧰 Aikido Safe Chain

The items that name it 20

• Software supply chain security best practices for 2026
  article2026-10-21It is written here as Aikido Safe Chain: free, open-source install-time malicious package blocker for individuals.
• tensorlake NPM package compromised with Shai Hulud worm
  writeup2026-10-08

  Open source tool that intercepts npm, npx, yarn, pnpm, and pnpx commands and checks packages against Aikido Intel before install, for future protection against malicious packages.

• Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack
  writeup2026-08-20

  Open source tool that intercepts npm, npx, yarn, pnpm, and pnpx commands and checks packages against Aikido Intel before install

• How Aikido Intel detects malware and vulnerabilities first
  article2026-07-13

  Free, open-source tool powered by Aikido Intel that sits beside a package manager and blocks installation of packages confirmed as malware or less than 24 hours old.

• What is a dependency firewall?
  article2026-07-13

  Free, open-source dependency firewall for npm, yarn, pnpm, pip, uv, poetry, and other package managers; checks every install against Aikido Intel before the download completes; free and open source under MIT license, no Aikido account required

• Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry
  writeup2026-07-09It is written here as Aikido Safe Chain (open source).

  Intercepts npm, npx, yarn, pnpm, and pnpx commands and checks packages against Aikido Intel before install, to prevent installing malicious packages.

• Packagist is now protected by Aikido Intel and other updates to the PHP registry
  article2026-06-26

  Free, open-source tool that prevents installing new or malicious packages before they get installed on a device, for non-PHP ecosystems; offers protection similar to minimum release age in the meantime

• Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets
  writeup2026-06-24

  Open source tool that intercepts npm, npx, yarn, pnpm, and pnpx commands and checks packages against Aikido Intel before install

• Over 140 popular Mastra npm Packages Hit by Supply Chain Attack
  writeup2026-06-17

  Open source tool that intercepts npm, npx, yarn, pnpm, and pnpx commands and checks packages against Aikido Intel before install

• Multiple JetBrains IDE plugins caught stealing AI keys
  writeup2026-06-16

  Open source tool that intercepts npm, npx, yarn, pnpm, and pnpx commands and checks packages against Aikido Intel before install.

• Compromised Rust crate onering performs code exfiltration
  writeup2026-06-10

  Open source tool that intercepts npm, npx, yarn, pnpm, and pnpx commands and checks packages against Aikido Intel before install

• Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System
  writeup2026-06-09It is written here as Aikido Safe Chain (open source).

  intercepts npm, npx, yarn, pnpm, and pnpx commands and checks packages against Aikido Intel before install to stop malicious packages before they reach the install step

• Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
  writeup2026-06-01

  open source tool that intercepts npm, npx, yarn, pnpm, and pnpx commands and checks packages against Aikido Intel before install

• What MDM can't protect on developer machines (and what to do about it)
  article2026-05-28

  Open source starting point for developer endpoint protection without a full deployment

• Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer
  writeup2026-05-23

  Open source tool that intercepts npm, npx, yarn, pnpm, and pnpx commands and checks packages against Aikido Intel before install

• Mini Shai-Hulud strikes again: npm worm compromises hundreds of @antv packages
  article2026-05-19

  Open source tool that intercepts npm, pnpm, and yarn commands and checks packages against Aikido Intel before install, blocking compromised or too-new packages before install hooks run

• Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack
  writeup2026-05-11

  Open-source tool that intercepts npm, npx, yarn, pnpm, and pnpx commands and checks packages against Aikido Intel before install, for future protection against malicious packages

• The complete GitHub Actions security checklist
  article2026-05-11

  Blocks known malicious npm and PyPI packages and enforces minimum package age policies to protect package installs.

• AikidoSec/safe-chain
  repoIt is written here as Aikido Safe Chain (version 1.5.25 in the install commands): free, tokenless local proxy and shell wrapper that checks npm and PyPI package downloads for malware on developer laptops and CI/CD.

  version 1.5.25 in the install commands

• Betterleaks: Gitleaks creator's open-source secrets scanner successor
  article

  Open source security project by Aikido, listed alongside Betterleaks.