Active 2024-11-24

Package-Inferno

A Public Package Scanner for The Community. Scan npm packages for supply chain threats.

npm supply-chain scanner security

Quickstart

Get started instantly

git clone https://github.com/MHaggis/Package-Inferno.git && pip install -r requirements.txt

⚠ The Problem

Supply chain attacks via malicious npm packages are increasingly common. Defenders need tools to scan and analyze packages for suspicious behavior.

Package-Inferno scans npm packages for indicators of supply chain compromise, helping identify malicious packages before they cause damage.

Provides defenders with an open source tool for npm package security analysis.

Package-Inferno is a community package scanner focused on identifying supply chain threats in npm packages.

Active

Helping defenders learn and validate npm supply-chain detections with safe atomic tests.

npm supply-chain detection atomic-testing +1

Active

The home of the SDDLMaker. Parse, create, and understand SDDL strings.

sddl windows permissions security

Active

ShellSweeping the evil. PowerShell/Python/Lua tool to detect potential web shells using entropy analysis, machine learning, and YARA rules.

webshell detection hunting entropy +2