数据模拟库
Forensic scanner for Shai-Hulud 2.0 malware artifacts and compromised packages.
Pure Node Shai Hulud infestation scanner
Shai-Hulud Supply Chain Vulnerability Scanner - Detect compromised npm packages from the Shai-Hulud attacks (v1, v2, v3)
Detect and fix the mini-shai-hulud TanStack supply-chain attack (socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack)
Zero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like Mini Shai-Hulud (CVE-2026-45321).
Security scanner that checks npm dependencies for Shai Hulud vulnerable packages. 100% offline, zero data collection, zero telemetry. Scans all dependencies against 689+ known compromised packages.
Tiny zero-dependency CLI that scans npm, pnpm, yarn, and bun lockfiles for packages compromised in the TanStack May 2026 npm supply-chain incident (mini Shai-Hulud). Uses the official Snyk advisory as the source of truth.
A CLI tool for detecting the 'Shai-Hulud' npm supply chain attack that occurred in September 2025
Open-source supply-chain security scanner for npm, PyPI, Cargo, Go, Docker, VS Code extensions, GitHub Actions, IaC and Solana C2. Detects GlassWorm, Shai-Hulud, PPE attacks, dependency confusion and 120+ malware indicators. Generates CycloneDX 1.6 SBOMs
Detect malicious npm packages linked to the Shai-Hulud 2.0 supply chain attack.
A security scanner that detects npm packages compromised by supply chain attacks, including the TanStack wave 4 attack (May 2026), the Axios attack (March 2026), and Shai-Hulud malware.
My another npm package for shai
Throwaway package for validating the Falcon to public-npm bootstrap path post-Shai-Hulud. Safe to unpublish.
Natural language to shell commands. Stop Googling, start doing.
checks package lock files for shai hulud vulnerabilities
Sandboxing shell for running AI coding agents inside Docker containers
AI-powered shell command assistant — describe what you want in natural language, get the right command.
CLI tool to install BMAD workflow files into any project with integrated Shai-Hulud 2.0 security scanning
Find Shai-Hulud worm in lock files
Testing for shai-hulud infected packages
Project integrity scanner for known vulnerabilities and suspicious patterns related to the Shai-Hulud supply-chain attack.
Offline AST-grade npm/pnpm/yarn/bun supply-chain auditor that flags Shai-Hulud-style install-script worms. Real JavaScript AST analysis with taint approximation, IoC corpus matching, sigstore provenance verification, and baseline diffing — designed as def
Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.
A shell AI assistant
AI-assisted shell commands: create shell commands from natural language, or have them explained
Intelligent conversion from Unicode to POSIX portable strings
Terminal security - catches homograph attacks, pipe-to-shell, ANSI injection
Terminal security analysis engine - homograph attacks, pipe-to-shell, ANSI injection
Multi-agent template package manager and CLI for aikit.toml packages; aikit-sdk provides the Rust gateway for catalog, deploy, and agent run APIs.
SBOM diff with supply-chain risk signals (CVEs, typosquats, maintainer-age).
EME block cipher mode of operation
A CLI tool to detect supply chain attacks in npm packages by analyzing lifecycle scripts, dependencies, and registry metadata.
Sandboxed npm execution for MCP servers via Apple container
Placeholder for crosshair
A library for interacting with Shaiya binary files.
A command-line interface for shaicli.dev - download, share, and sync AI agent configurations (Claude, Cursor, etc.) across projects and teams.
An adaptation of the Enki blogging application as a Rails::Engine, for mounting in a host application
Small string extension which normalizes strings making them suitable for usage as a slug in a url. Based on code from Xavier Shay's Enki.
Helps developers work with modules and files
POpen4 provides the Rubyist a single API across platforms for executing a command in a child process with handles on stdout, stderr, stdin streams as well as access to the process ID and exit status.
This gem contains models and controllers for students app. You need to make your own views.
No description provided.
No description provided.
No description provided.
No description provided.
No description provided.
No description provided.
No description provided.
No description provided.
No description provided.
No description provided.
No description provided.
No description provided.