Alternatives and similar repositories for pypi-scan:

Users that are interested in pypi-scan are comparing it to the libraries listed below

• hannob / pypi-bad
  Bad packages from the pypi repository
  ☆9Updated 6 years ago
• rsc-dev / pypi_malware
  PyPI malware packages
  ☆58Updated 6 years ago
• lyvd / bandit4mal
  A fork of Bandit tool with patterns to identifying malicious python code.
  ☆25Updated 2 years ago
• in-toto / supply-chain-compromises
  ☆22Updated 3 years ago
• IQTLabs / software-supply-chain-compromises
  A dataset of software supply chain compromises. Please help us maintain it!
  ☆128Updated 2 years ago
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆75Updated last week
• cve-search / CveXplore
  CveXplore
  ☆38Updated last month
• Phat3 / CVE-analyzer
  Extract useful semantic from CVE descriptions usinig NLP
  ☆25Updated 2 years ago
• lookfwd / getting-started-clusterfuzz-local-in-aws
  ☆15Updated 4 years ago
• fabric8-analytics / cvejob
  A tool which tries to map CVEs from NVD to packages in supported ecosystems (Maven, NPM, PyPI).
  ☆12Updated 2 years ago
• jordan-wright / ossmalware
  ☆93Updated 2 years ago
• chainguard-dev / bom-shelter
  A place to systematically store software bill of materials (SBOM) documents.
  ☆46Updated last year
• securisec / glorifiedgrep
  Static code search python lib
  ☆18Updated 4 years ago
• CERTCC / VINCE
  VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…
  ☆65Updated last month
• abhinavbom / clara
  Serverless, real-time, ClamAV+Yara scanning for your S3 Buckets
  ☆31Updated 11 months ago
• COSSAS / Certitude
  CERTITUDE - A python package to classify malicious URLs
  ☆20Updated 2 years ago
• IQTLabs / AuraBorealisApp
  Do You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data
  ☆19Updated 2 years ago
• ouspg / cloudfuzzer
  ☆22Updated 8 years ago
• OTARIS / FirmwareCheck
  Automated dynamic security analysis by emulation of IoT firmware images in CI-pipelines.
  ☆12Updated 3 years ago
• Polydet / polydet
  Polyglot detector
  ☆21Updated last year
• cyber-itl / citl-static-analysis
  CITL's static analysis engine for native code artifacts
  ☆20Updated 4 years ago
• ctxis / cvsslib
  A library implementing CVSS v2 and v3 scores
  ☆31Updated 5 years ago
• grimm-co / delta-debugging
  Debugging library to quickly get the minimal crashing test case
  ☆37Updated 6 years ago
• jgamblin / cve.icu
  CVE.ICU code.
  ☆42Updated this week
• purs3lab / Argus
  ☆43Updated 9 months ago
• runZeroInc / recog
  Pattern recognition for hosts, services, and content
  ☆13Updated 2 years ago
• DataDog / malicious-software-packages-dataset
  An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.
  ☆203Updated this week
• SunLab-GMU / PySecDB
  The official repository of ICSME'23 paper "Exploring Security Commits in Python"
  ☆18Updated last year
• usnistgov / swid-tools
  ☆13Updated 2 weeks ago
• ossf / package-feeds
  Feed parsing for language package manager updates
  ☆79Updated 5 months ago