AIKIDO SAFE CHAIN

Summary from the TLDR InfoSec newsletter

Aikido Safe Chain is a lightweight local proxy that intercepts npm and PyPI package downloads, checking them in real-time against Aikido Intel threat intelligence to block malware before it reaches developer machines or CI/CD pipelines. It supports npm, yarn, pnpm, bun, pip, uv, and poetry via shell aliases, and temporarily suppresses npm packages published within the last 24 hours by default to catch undetected threats during the highest-risk window. Installation is tokenless and requires no build data sharing, with native CI/CD support for GitHub Actions, Azure Pipelines, GitLab, Jenkins, CircleCI, and Bitbucket.