firefart/hijagger

🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

A simple project to detect the Shai-Hulud npm supply chain attack

Advisory database for Python packages published on pypi.org

A curated database of insecure Python packages

A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

Supply Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages 🔥

Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

Command-line interface for socket.dev security analysis