2 repositories found
Clear filters
gensecaihq
/
Shai-Hulud-2.0-Detector
GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.
JavaScript
149
34
Updated 1 month ago
Security
bufferoverflow
/
verdaccio-gitlab
private npm registry (Verdaccio) using gitlab-ce as authentication and authorization provider
JavaScript
161
55
Updated 1 month ago
Security