Alternatives and similar repositories for pypi-scan

Users that are interested in pypi-scan are comparing it to the libraries listed below

• IQTLabs / software-supply-chain-compromises
  A dataset of software supply chain compromises. Please help us maintain it!
  ☆130Updated 2 years ago
• rsc-dev / pypi_malware
  PyPI malware packages
  ☆58Updated 6 years ago
• jordan-wright / ossmalware
  ☆93Updated 2 years ago
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆78Updated last month
• fabric8-analytics / cvejob
  A tool which tries to map CVEs from NVD to packages in supported ecosystems (Maven, NPM, PyPI).
  ☆12Updated last month
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆151Updated last year
• cve-search / CveXplore
  CveXplore
  ☆43Updated last week
• RogoLabs / cve.icu
  CVE.ICU code.
  ☆46Updated this week
• Phat3 / CVE-analyzer
  Extract useful semantic from CVE descriptions usinig NLP
  ☆25Updated 2 years ago
• olbat / nvdcve
  NVD/CVE as JSON files
  ☆122Updated this week
• securisec / glorifiedgrep
  Static code search python lib
  ☆18Updated 4 years ago
• Aurore54F / JaSt
  Syntactic detection of malicious (obfuscated) JavaScript files
  ☆83Updated 5 years ago
• CERTCC / VINCE
  VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…
  ☆76Updated last week
• osssanitizer / osspolice
  Identifying Open-Source License Violation and 1-day Security Risk at Large Scale
  ☆67Updated 7 years ago
• RedHatProductSecurity / cvss
  CVSS2/3/4 library with interactive calculator for Python 2 and Python 3
  ☆107Updated 3 weeks ago
• ExodusIntelligence / cpe_utils
  A simple python library to assist in working with cpes
  ☆19Updated last year
• joshbressers / cve-analysis
  Tools for conducting analysis of CVE data in Elasticsearch
  ☆74Updated last month
• stacscan / stacs
  Static Token And Credential Scanner
  ☆96Updated 2 years ago
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆128Updated 2 weeks ago
• fkie-cad / iva
  IVA is a system to scan for known vulnerabilities in software products installed inside an organization. IVA uses CPE identifiers to sear…
  ☆67Updated 4 years ago
• JordanMilne / Advocate
  An SSRF-preventing wrapper around Python's requests library. Advocate is no longer maintained, please fork and rename if you would like t…
  ☆95Updated last year
• rbortolameotti / decanter
  ☆16Updated 7 years ago
• RandoriDev / test-saml-idp
  ☆30Updated 4 years ago
• duo-labs / narrow
  Low-effort reachability analysis for third-party code vulnerabilities.
  ☆21Updated 2 years ago
• ZSShen / MeltingPot
  A tool to cluster similar executables (PEs, DEXs, and etc), extract common signature, and generate Yara patterns for malware detection.
  ☆25Updated 6 years ago
• Aurore54F / JStap
  Modular static malicious JavaScript detection system
  ☆71Updated 4 years ago
• cve-search / VIA4CVE
  Vulnerability Information Aggregator for CVEs
  ☆123Updated 6 years ago
• lyvd / bandit4mal
  A fork of Bandit tool with patterns to identifying malicious python code.
  ☆29Updated 2 years ago
• DataDog / malicious-software-packages-dataset
  An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.
  ☆216Updated this week
• in-toto / supply-chain-compromises
  ☆22Updated 3 years ago