Introducing Safe Chain: Stopping Malicious npm Packages Before They Wreck Your Project

Aikido reports multiple active supply-chain attacks against the npm ecosystem in 2025 — citing thousands of malicious packages discovered (6,000 in June), a backdoored xrpl package exfiltrating wallet secrets, a rand-user-agent RAT, and a 17-library compromise affecting React Native via a stolen maintainer token — and includes an obfuscated Node.js backdoor code sample and detection timelines; the document presents Aikido Safe Chain and Aikido Endpoint as real-time protective solutions to block such malicious packages and other developer-focused threats.