Alternatives and similar repositories for pypi-scan

Users that are interested in pypi-scan are comparing it to the libraries listed below

• IQTLabs / software-supply-chain-compromises
  A dataset of software supply chain compromises. Please help us maintain it!
  ☆130Updated 3 years ago
• jordan-wright / ossmalware
  ☆93Updated 3 years ago
• rsc-dev / pypi_malware
  PyPI malware packages
  ☆58Updated 6 years ago
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆153Updated last year
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆79Updated last week
• Aurore54F / JaSt
  Syntactic detection of malicious (obfuscated) JavaScript files
  ☆83Updated 5 years ago
• RogoLabs / cve.icu
  CVE.ICU code.
  ☆47Updated this week
• Aurore54F / JStap
  Modular static malicious JavaScript detection system
  ☆74Updated 4 years ago
• securisec / glorifiedgrep
  Static code search python lib
  ☆18Updated 5 years ago
• fabric8-analytics / cvejob
  A tool which tries to map CVEs from NVD to packages in supported ecosystems (Maven, NPM, PyPI).
  ☆12Updated 4 months ago
• osssanitizer / osspolice
  Identifying Open-Source License Violation and 1-day Security Risk at Large Scale
  ☆67Updated 7 years ago
• cve-search / CveXplore
  CveXplore
  ☆42Updated 2 months ago
• fkie-cad / iva
  IVA is a system to scan for known vulnerabilities in software products installed inside an organization. IVA uses CPE identifiers to sear…
  ☆67Updated 4 years ago
• lyvd / bandit4mal
  A fork of Bandit tool with patterns to identifying malicious python code.
  ☆28Updated 3 years ago
• olbat / nvdcve
  NVD/CVE as JSON files
  ☆123Updated this week
• Phat3 / CVE-analyzer
  Extract useful semantic from CVE descriptions usinig NLP
  ☆25Updated 2 years ago
• anvilsecure / hominoid
  Proof of concept for an anti-phishing browser plugin, working by comparing pages screenshots with perceptual hashing algorithms.
  ☆11Updated 3 years ago
• vfeedio / pyvfeed
  Python API for vFeed Vulnerability & Threat Intelligence Database Enterprise & Pro Editions
  ☆102Updated last month
• ajinabraham / libsast
  Generic SAST Library
  ☆132Updated 4 months ago
• ossf / package-feeds
  Feed parsing for language package manager updates
  ☆80Updated 11 months ago
• stacscan / stacs
  Static Token And Credential Scanner
  ☆95Updated 2 years ago
• DataDog / malicious-software-packages-dataset
  An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.
  ☆253Updated last week
• s3c2 / vfcfinder
  VFCFinder: Searching for the Missing Vulnerability Fixing Commits
  ☆30Updated last year
• RedHatProductSecurity / cvss
  CVSS2/3/4 library with interactive calculator for Python 2 and Python 3
  ☆109Updated 3 months ago
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆95Updated last year
• JordanMilne / Advocate
  An SSRF-preventing wrapper around Python's requests library. Advocate is no longer maintained, please fork and rename if you would like t…
  ☆95Updated 2 years ago
• grimm-co / delta-debugging
  Debugging library to quickly get the minimal crashing test case
  ☆37Updated 7 years ago
• duo-labs / narrow
  Low-effort reachability analysis for third-party code vulnerabilities.
  ☆21Updated 2 years ago
• ExodusIntelligence / cpe_utils
  A simple python library to assist in working with cpes
  ☆19Updated last year
• icyphox / asdf
  scrapped ideas and garbage code
  ☆13Updated 4 years ago