Npm-scan: Modern supply chain security for the npm ecosystem
Trending on Hacker News: Npm-scan: Modern supply chain security for the npm ecosystem (0 points, via github.com)
In one line
Modern supply chain security for the npm ecosystem. Static + behavioral analysis that catches what npm audit, Snyk, and Socket miss — obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. - lateos-ai/npm-scan
Opening excerpt
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert {{ message }} Uh oh! There was an error while loading. Please reload this page .
lateos-ai / npm-scan Public Notifications You must be signed in to change notification settings Fork 2 Star 17 Use this GitHub action with your project Add this Action to an existing workflow or create a new one View on Marketplace main Branches Tags Go to file Code Open more actions menu Folders and files Name Name Last commit message Last commit date Latest commit History 217 Commits 217 Commits .github .github .husky .husky api api backend backend cli cli deploy/ helm/ npm-scan deploy/ helm/ npm-scan docker docker docs docs fixtures/ campaigns fixtures/ campaigns scripts scripts src/ config src/ config test test tests/ corpus tests/ corpus .dockerignore .dockerignore .gitignore .gitignore .npmignore .npmignore .prettierignore .prettierignore .prettierrc .prettierrc …
(Excerpted from the original; full article via the source link below.)
Source: Hacker News