nxgn-kd01/shai-hulud-scanner
Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.
Small tool to inform you about potential risks in project dependencies list
Appears on
Quick read
Latest capture 2026-10-18 09:42
Archive status reflects the last catalog sync, not a maintenance assessment. Check recent releases, issue responses, and fit for your project with the repository shortlisting checklist.
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
1 observed capture since 2026-10-18. Observed captures are shown by default.
Stars from first capture 0
Observed captures only
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.
Mitigate security concerns of Dependency Confusion supply chain security risks
An extensible, heuristic-based vulnerability scanning tool for installed npm packages
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages
Lint an npm or yarn lockfile to analyze and detect security issues