https://cybertoolchain.io/tools/safe-chain New releases and features in safe-chain, tracked by The Cyber Toolchain. en Wed, 17 Jun 2026 11:59:03 GMT https://github.com/AikidoSec/safe-chain/releases/tag/1.5.8 https://github.com/AikidoSec/safe-chain/releases/tag/1.5.8 Wed, 17 Jun 2026 11:59:03 GMT Adds `-is-mdm` flag to the Windows endpoint installer. • `-is-mdm` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.5.4 https://github.com/AikidoSec/safe-chain/releases/tag/1.5.4 Mon, 01 Jun 2026 14:11:40 GMT safe-chain v1.5.4 adds PDM package manager support and file-based logging • `PDM` added as a supported Python package manager alongside pip and poetry • Adds file-based logging capability to persist logs to disk Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.5.3 https://github.com/AikidoSec/safe-chain/releases/tag/1.5.3 Tue, 12 May 2026 17:46:19 GMT safe-chain 1.5.3 adds Rush monorepo support via the new `rush` integration • Adds `rush` subcommand and configuration to enable safe-chain in Rush-managed monorepos Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.5.0 https://github.com/AikidoSec/safe-chain/releases/tag/1.5.0 Mon, 20 Apr 2026 21:56:43 GMT safe-chain 1.5.0 adds uvx package manager support and custom install directory configuration • [Python Improvements]: Add `uvx` support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.4.6 https://github.com/AikidoSec/safe-chain/releases/tag/1.4.6 Mon, 30 Mar 2026 19:19:39 GMT Adds manual setup/teardown on failure instructions and minimum package age enforcement for npm and PyPI sources. • Enforce minimum package age for direct npm downloads (e.g. yarn lockfiles) • Add minimum package age checks for pypi Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.4.3 https://github.com/AikidoSec/safe-chain/releases/tag/1.4.3 Fri, 13 Feb 2026 08:58:54 GMT safe-chain 1.4.3 adds Windows install script support and fixes PowerShell execution policy checks for shell integration. • Supports Windows platforms via the `install-safe-shain.sh` script in environments like git bash or cygwin • Adds pre-install execution policy verification in PowerShell to ensure safe-chain can run on Windows • Propagates command-not-found errors from wrapped commands within the shell integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.4.2 https://github.com/AikidoSec/safe-chain/releases/tag/1.4.2 Fri, 16 Jan 2026 08:54:39 GMT safe-chain v1.4.2 adds min package age exclusion and configurable log level • `SAFE_CHAIN_LOG_LEVEL` env var allows configuring log level Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.3.4 https://github.com/AikidoSec/safe-chain/releases/tag/1.3.4 Tue, 06 Jan 2026 12:14:34 GMT Adds verify command, Jenkins CI integration docs, and python custom registries configuration • Adds `safe-chain verify` command to check if safe-chain is actively intercepting package manager commands • Allows configuring python custom registries through environment variable `SAFE_CHAIN_PYTHON_REGISTRIES` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.3.3 https://github.com/AikidoSec/safe-chain/releases/tag/1.3.3 Fri, 19 Dec 2025 10:31:01 GMT safe-chain 1.3.3 adds Circle CI and PIPX support plus custom npm registry configuration • Adds `circleci` to the list of supported continuous integration platforms via new `CI_PROVIDER=circleci` environment variable • Enables installation via PIPX using standard Python package indexing • Supports configuring custom or private npm registries for dependency resolution Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.3.2 https://github.com/AikidoSec/safe-chain/releases/tag/1.3.2 Wed, 17 Dec 2025 12:55:14 GMT safe-chain 1.3.2 provides an install script artifact with version-skipping logic for improved setup security and idempotency. • The installer is now distributed as a release artifact to enable secure version pinning • Added pre-flight check to skip installation if `safe-chain` is already present and the version matches Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.2.3 https://github.com/AikidoSec/safe-chain/releases/tag/1.2.3 Mon, 15 Dec 2025 15:22:43 GMT safe-chain v1.2.3 adds Poetry support and configurable package age setting via `0` • Adds `Poetry` dependency management support to `safe-chain python` for lockfile-based analysis • Allows `minimum_package_age` setting to accept `0`, disabling the age filter • Adds system-wide uninstall scripts to clean up safe-chain shims and related files Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.1.8 https://github.com/AikidoSec/safe-chain/releases/tag/1.1.8 Mon, 24 Nov 2025 15:55:16 GMT safe-chain v1.1.8 adds pip wrapping, malware list scanning, 24h package age suppression, and verbose logging • `safe-chain setup --include-python` enables pip/pip3 interception and PyPI malware list scanning • New `--safe-chain-skip-minimum-package-age` flag to bypass the 24-hour validation delay for specific installs • `--safe-chain-logging=verbose` option adds verbose output capability Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.1.6 https://github.com/AikidoSec/safe-chain/releases/tag/1.1.6 Mon, 27 Oct 2025 13:10:21 GMT safe-chain v1.1.6 adds silent mode for log suppression • Adds `--silent` flag to disable all logging output Breaking changes: • The `--safe-chain-malware-action` flag has been removed; usage will result in an error. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.1.5 https://github.com/AikidoSec/safe-chain/releases/tag/1.1.5 Wed, 15 Oct 2025 11:43:35 GMT Adds HTTP proxy mode, package install timeout reduction, and a version subcommand • Adds `--version` flag (shorthand `-v`) to display the safe-chain version. • Enables safe-chain to act as a regular HTTP proxy, allowing it to forward requests to local registries instead of only intercepting them. • Reduces timeout limits during package installation to improve scanner performance on npm >= 10.4.0. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.1.0 https://github.com/AikidoSec/safe-chain/releases/tag/1.1.0 Wed, 08 Oct 2025 14:53:39 GMT Safe Chain 1.1.0 adds a proxy-based blocker for all package managers and Bun support • Adds a lightweight proxy server that intercepts and blocks downloads of packages containing malware, enabling full dependency tree protection for all package managers. • Adds `bun install` and `bunx` command protection via the same malware detection engine used for other package managers. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.0.24 https://github.com/AikidoSec/safe-chain/releases/tag/1.0.24 Wed, 24 Sep 2025 13:54:38 GMT safe-chain adds `setup-ci` subcommand to wrap npm commands in CI/CD pipelines • Adds the `safe-chain setup-ci` command to configure GitHub Actions and Azure Pipelines for wrapping npm commands. • Changes default behavior to block package installation and exit with code 1 when scanning fails (previously it ran the command). Breaking changes: • safe-chain now exits with code 1 and blocks package installation when scanning fails, instead of continuing execution. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain https://github.com/AikidoSec/safe-chain/releases/tag/1.0.21 https://github.com/AikidoSec/safe-chain/releases/tag/1.0.21 Thu, 11 Sep 2025 12:55:59 GMT safe-chain v1.0.21 changes malware detection default from prompt to block • Malware detection now blocks installation by default instead of prompting, enforcing security by default. • Adds `--safe-chain-malware-action=prompt` flag to override the new blocking default behavior. Breaking changes: • The default action when malware is detected has changed from prompt (allowing bypass by typing 'Y') to block, which will cause safe-chain to exit with an error on malicious packages. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/safe-chain