Cobenian/shai-hulud-detect

🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

Protect against malicious open source packages 🤖

Command-line interface for socket.dev security analysis

Supply Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages 🔥

Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

Packj stops ⚡ Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration

Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

Harden your package manager configs against supply chain attacks.