🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages
Supply Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages 🔥
An open-source dataset of malicious software packages found in the wild.
Detect Glassworm & trojan source attacks that employ unicode bidi attacks to inject malicious code
Campaigns of (mostly) malicious packages - currently only in PyPI
This open-source project tracks RED-LILI's activity over time as there are evidence the actor is still active. All information provided here is intended for research purposes.
Open-source dependency behavioral diff engine. This detects malicious changes across multiple development ecosystems: npm, PyPI, Go, Cargo, Maven, and NuGet
Project Aura: Security auditing and code introspection
Offline, machine-wide Python supply-chain security audit - scan every virtual environment for vulnerable & malicious packages. CVE + typosquat detection, agent/CI-ready JSON. Also a lightweight venv manager.
Detect, assess, and respond to supply chain attacks across npm/yarn and Python (pip/poetry/uv). Claude Code skill + standalone scripts. Built during axios RAT (2026-03-31) and Starlette BadHost CVE-2026-48710 (2026-05-22).
Unofficial tools for blocking malicious packages by integrating Checkmarx MPIAPI into CI/CD and similar systems
🛡️ Advanced NPM supply chain attack detection tool - Specialized in detecting Shai-Hulud compromise indicators with beautiful CLI interface and automated security reporting
Lightweight AI security guard for install/download commands - blocks malicious npm/pip/cargo packages before they install. Zero overhead, <1s check. Built from a real supply chain attack experience.
Free, no-login security scanner for any public GitHub repo. Check for leaked secrets, malware, malicious packages, typosquats, vulnerable dependencies (OSV) and bad binaries (VirusTotal) before you clone. Swap github.com to friskit.dev.
Personal research portfolio and cyber threat intelligence blog focused on malware analysis, software supply chain, and open source security.
A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
DevSecOps-driven phishing email and malicious URL classifier on AWS — live mail scoring via self-hosted Postfix/Dovecot, ML inference on ECS Fargate, 165 resources in Terraform, security gates on every PR.
Hackers attacks intercepted
🛠️ Build cross-platform, position-independent Windows shellcode in C++ for user or kernel mode, supporting x86 and x64 development environments.
A simple web tool to check if an open source package contains malware.
To associate your repository with the malicious-packages topic, visit your repo's landing page and select "manage topics."