← 返回专题广场

shai-hulud

2 个项目 · ⭐ 1.4k

lirantal/npm-security-best-practices

Collection of npm package manager Security Best Practices

⭐ 1.2k ⑂ 42 Apache-2.0 · 2026-05-25推送

awesome awesome-list

2026-05-25

最近推送

gensecaihq/Shai-Hulud-2.0-Detector

GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.

TypeScript ⭐ 149 ⑂ 34 MIT · 9 小时前推送

devsecops github-actions

9 小时前