AikidoSec/safe-chain
View on GitHub ↗ ★ 1,877 JavaScript
Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.
6 mentions on Hacker News by 6 people: 0 stories, 6 comments · first 2025-09-08 · latest 2026-10-22
20082026
-
…just next level: "Installing the Aikido Safe Chain is easy with the installation script. curl -fsSL https://github.com/AikidoSec/safe-chain/releases/download/1.... -o /tmp/install-safe-chain.sh \ && echo…
comment by mstaoru · 2026-10-22 · in Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor -
I use safechain for this, because there is always gonna be another package manager configured wrong. https://github.com/AikidoSec/safe-chain
comment by sunbum · 2026-10-21 · in Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor -
For people that don't use an MDM https://github.com/AikidoSec/safe-chain Pretty cool it's free
comment by kidk · 2026-04-01 · in Deploy Aikido Safe-Chain via Iru (Kandji) or Jamf -
…to install a big blob of JavaScript to look for vulns in my other big blobs of JavaScript [1] https://github.com/AikidoSec/safe-chain
comment by abound · 2026-03-15 · in Glassworm is back: A new wave of invisible Unicode attacks hits repositories -
…open source packages]( https://github.com/safedep/vet ) - [GitHub - AikidoSec/safe-chain]( https://github.com/AikidoSec/safe-chain ) - npm audit
comment by dflock · 2025-09-17 · in Tinycolor supply chain attack post-mortem -
> How do you prevent supply chain compromises like this? Take a look at https://github.com/AikidoSec/safe-chain and https://intel.aikido.dev/?tab=malware ! Disclaimer: I work at Aikido Security :)
comment by hansott · 2025-09-08 · in NPM debug and chalk packages compromised