arnica/depsguard

Supply Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages 🔥

Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

Command-line interface for socket.dev security analysis

Protect against malicious open source packages 🤖

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Packj stops ⚡ Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

A simple project to detect the Shai-Hulud npm supply chain attack

Software Supply Chain Security Platform

🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages