Alternatives and similar repositories for pypi-scan:

Users that are interested in pypi-scan are comparing it to the libraries listed below

• lyvd / bandit4mal
  A fork of Bandit tool with patterns to identifying malicious python code.
  ☆25Updated 2 years ago
• hannob / pypi-bad
  Bad packages from the pypi repository
  ☆9Updated 6 years ago
• jordan-wright / ossmalware
  ☆93Updated 2 years ago
• rsc-dev / pypi_malware
  PyPI malware packages
  ☆58Updated 6 years ago
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆75Updated 3 weeks ago
• IQTLabs / software-supply-chain-compromises
  A dataset of software supply chain compromises. Please help us maintain it!
  ☆128Updated 2 years ago
• in-toto / supply-chain-compromises
  ☆22Updated 3 years ago
• cve-search / CveXplore
  CveXplore
  ☆38Updated 2 weeks ago
• IQTLabs / AuraBorealisApp
  Do You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data
  ☆19Updated 2 years ago
• fabric8-analytics / cvejob
  A tool which tries to map CVEs from NVD to packages in supported ecosystems (Maven, NPM, PyPI).
  ☆12Updated 2 years ago
• lookfwd / getting-started-clusterfuzz-local-in-aws
  ☆15Updated 4 years ago
• osssanitizer / osspolice
  Identifying Open-Source License Violation and 1-day Security Risk at Large Scale
  ☆67Updated 7 years ago
• jgamblin / cve.icu
  CVE.ICU code.
  ☆39Updated this week
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆142Updated last year
• Samsung / CredData
  CredData is a set of files including credentials in open source projects. CredData includes suspicious lines with manual review results a…
  ☆33Updated last week
• usnistgov / swid-tools
  ☆13Updated 6 months ago
• purs3lab / Argus
  ☆44Updated 9 months ago
• joernio / query-database
  Default query sets for Joern
  ☆27Updated 3 years ago
• securisec / glorifiedgrep
  Static code search python lib
  ☆18Updated 4 years ago
• wspr-ncsu / mininode
  Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis.
  ☆21Updated 2 years ago
• DataDog / malicious-software-packages-dataset
  An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.
  ☆193Updated this week
• CybercentreCanada / assemblyline-service-cuckoo
  Assemblyline 4 Malware detonation service (Cuckoo)
  ☆17Updated last year
• chainguard-dev / bom-shelter
  A place to systematically store software bill of materials (SBOM) documents.
  ☆44Updated last year
• CERTCC / VINCE
  VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…
  ☆64Updated 3 weeks ago
• s3c2 / vfcfinder
  VFCFinder: Searching for the Missing Vulnerability Fixing Commits
  ☆27Updated last year
• OTARIS / FirmwareCheck
  Automated dynamic security analysis by emulation of IoT firmware images in CI-pipelines.
  ☆11Updated 3 years ago
• ExodusIntelligence / cpe_utils
  A simple python library to assist in working with cpes
  ☆19Updated last year
• CybercentreCanada / assemblyline-core
  Core server components for Assemblyline 4 (Alerter, dispatcher, expiry, ingester, scaler, updater, ...)
  ☆20Updated this week
• ossf / package-feeds
  Feed parsing for language package manager updates
  ☆78Updated 4 months ago
• Aurore54F / JStap
  Modular static malicious JavaScript detection system
  ☆69Updated 4 years ago