Ossillate Inc.

packj

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

packj-github-action

Packj audits pull requests for malicious/risky open-source deps

packj-github-action-demo

This test repo demos usage of Packj.dev GitHub Action to flag risky devs

Frelatage

The Python Fuzzer that the world deserves 🐍

confused

Tool to check for dependency confusion vulnerabilities in multiple package management systems

exploits

exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House

maloss

Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

osspolice

Identifying Open-Source License Violation and 1-day Security Risk at Large Scale

packj-npm

packj-npm

pypi-bad

Bad packages from the pypi repository

pypi-scan

Scan pypi for typosquatting

pypi_malware

PyPI malware packages

sinopia

Private npm repository server

software-supply-chain-compromises

A dataset of software supply chain compromises. Please help us maintain it!

Symbolica

Symbolica's open-source symbolic execution engine.

tag-security

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

packagedna

This tool gives developers, researchers and companies the ability to analyze software packages of different programming languages that are being or will be used in their codes, providing information that allows them to know in advance if this library complies with processes. secure development, if currently supported, possible backdoors (malicious embedded code), typosquatting analysis, the history of versions and reported vulnerabilities (CVEs) of the package.

packj-circleci-orb

Packj CircleCI Orb

packj-gitlab-runner

Packj GitLab Runner

packj-npm-registry-firewall-action

Packj firewall for NPM registry

packj-npm-registry-firewall-action-demo

Demo for Packj NPM registry firewall action

top-1m