DataDog/supply-chain-firewall

Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

Harden your package manager configs against supply chain attacks.

A simple project to detect the Shai-Hulud npm supply chain attack

Command-line interface for socket.dev security analysis

Packj stops ⚡ Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

Protect against malicious open source packages 🤖

NPM Package