zonko-ai/supply-chain-attack

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Sep 25 – Nov 4, 2026

Stars +0 in 41 days

Forks +0 in 41 days

Merged PRs 0 in 41 days

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Sep 25Oct 1Oct 7Oct 13Oct 19Oct 25Oct 31

Stars, forks, merged pull requests and Trendshift Trending rank, by day
Day	Stars gained	Forks gained
Fri, Sep 25, 2026	+0	+0
Sat, Sep 26, 2026	+0	+0
Sun, Sep 27, 2026	+0	+0
Mon, Sep 28, 2026	+0	+0
Tue, Sep 29, 2026	+0	+0
Wed, Sep 30, 2026	+0	+0
Thu, Oct 1, 2026	+0	+0
Fri, Oct 2, 2026	+0	+0
Sat, Oct 3, 2026	+0	+0
Sun, Oct 4, 2026	+0	+0
Mon, Oct 5, 2026	+0	+0
Tue, Oct 6, 2026	+0	+0
Wed, Oct 7, 2026	+0	+0
Thu, Oct 8, 2026	+0	+0
Fri, Oct 9, 2026	+0	+0
Sat, Oct 10, 2026	+0	+0
Sun, Oct 11, 2026	+0	+0
Mon, Oct 12, 2026	+0	+0
Tue, Oct 13, 2026	+0	+0
Wed, Oct 14, 2026	+0	+0
Thu, Oct 15, 2026	+0	+0
Fri, Oct 16, 2026	+0	+0
Sat, Oct 17, 2026	+0	+0
Sun, Oct 18, 2026	+0	+0
Mon, Oct 19, 2026	+0	+0
Tue, Oct 20, 2026	+0	+0
Wed, Oct 21, 2026	+0	+0
Thu, Oct 22, 2026	+0	+0
Fri, Oct 23, 2026	+0	+0
Sat, Oct 24, 2026	+0	+0
Sun, Oct 25, 2026	+0	+0
Mon, Oct 26, 2026	+0	+0
Tue, Oct 27, 2026	+0	+0
Wed, Oct 28, 2026	+0	+0
Thu, Oct 29, 2026	+0	+0
Fri, Oct 30, 2026	+0	+0
Sat, Oct 31, 2026	+0	+0
Sun, Nov 1, 2026	+0	+0
Mon, Nov 2, 2026	+0	+0
Tue, Nov 3, 2026	+0	+0
Wed, Nov 4, 2026	+0	+0
Total	+0	+0

#1 on the list
Rank that day
Not trending

Cobenian/shai-hulud-detect

Shell

A simple project to detect the Shai-Hulud npm supply chain attack

41083

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

164174

perplexityai/bumblebee

Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

5.1k498

gensecaihq/Shai-Hulud-2.0-Detector

TypeScript

GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.

15333

DataDog/guarddog

Python

🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

1.2k131

projectdiscovery/depx

Malicious package & supply-chain intelligence

20121

SocketDev/socket-cli

TypeScript

Command-line interface for socket.dev security analysis

33577

safedep/vet

Protect against malicious open source packages 🤖

1.1k119

Momentum

Activity and trending

Social mentions

You might also like