A dataset of software supply chain compromises. Please help us maintain it!
☆130Sep 16, 2022Updated 4 years ago
Alternatives and similar repositories for software-supply-chain-compromises
Users that are interested in software-supply-chain-compromises are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A reimplementation of LastPyMile: A Python-based library to Identify the differences between build artifacts of PyPI packages and the res…☆15Jan 8, 2022Updated 4 years ago
- Artifact accompanying our ICSE '22 paper "Practical Automated Detection of Malicious npm Packages"☆47Jan 25, 2022Updated 4 years ago
- Do You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data☆20Jun 13, 2022Updated 4 years ago
- The Artifacts for ICSE 2023 paper: Bad Snakes: Understanding and Improving Python Package Index Malware Scanning☆13Feb 8, 2026Updated 8 months ago
- ☆21Nov 27, 2021Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Collection of tools for analyzing open source packages.☆373Oct 30, 2026Updated last week
- A fork of Bandit tool with patterns to identifying malicious python code.☆31Sep 1, 2022Updated 4 years ago
- ☆11Aug 24, 2023Updated 3 years ago
- A reading list for software supply-chain security.☆364Nov 21, 2022Updated 3 years ago
- 🎓Materials for the Hands-On Introduction to OpenFAIR Risk Analysis with Tidyrisk☆14Jan 22, 2021Updated 5 years ago
- sget is a keyless safe script retrieval and execution tool☆18Feb 7, 2022Updated 4 years ago
- JavaScript Transformation Techniques Detection☆11Jun 14, 2021Updated 5 years ago
- Go implementation for CNAB content trust verification using TUF, Notary, and in-toto☆31Jul 5, 2023Updated 3 years ago
- ☆101Jul 18, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆11Nov 11, 2022Updated 3 years ago
- Repository with all the Solarwinds Vulnerability information I've been tracking and using for communications, review, and technical under…☆25Dec 19, 2020Updated 5 years ago
- The repository has collected over 10,000 malicious pypi packages. This dataset is the work of the ASE 2023 paper "An Empirical Study of …☆137Sep 3, 2026Updated 2 months ago
- A proof-of-concept for how the SLSA Source Track could be implemented.☆19Updated this week
- Scan pypi for typosquatting☆37Jan 23, 2023Updated 3 years ago
- ☆37Apr 29, 2025Updated last year
- A Python wrapper library for libyara and a local server for fully utilizing the CPUs of the system to scan with yara...with additional ca…☆19Dec 8, 2022Updated 3 years ago
- PyPI malware packages☆58Dec 12, 2018Updated 7 years ago
- Simple tool to extract icons from a pe file and other useful information☆13Jun 22, 2018Updated 8 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- go-ima is a tool that checks if a file has been tampered with. It is useful in ensuring integrity in CI systems☆14Sep 28, 2023Updated 3 years ago
- Provide full security provenance and agent attestations from source to runtime☆28Jun 28, 2026Updated 4 months ago
- ☆12May 6, 2020Updated 6 years ago
- Awesome materials for software supply chain security☆17May 13, 2020Updated 6 years ago
- Court platform vulnerability disclosure(s).☆14May 18, 2024Updated 2 years ago
- 🔧 Command-line tool to convert docker containers into appimages☆11Mar 3, 2024Updated 2 years ago
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- egrets monitors egress☆46Apr 12, 2020Updated 6 years ago
- This repository holds interesting bits and pieces related to research I performed on wireless presentation devices manufactured by Awindi…☆14May 28, 2021Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Common weakness enumeration library for Python☆17Mar 17, 2024Updated 2 years ago
- We borrow the concept of 'personas' from UX/service design and apply it to threat actors to improve understanding between security, techn…☆11Jun 17, 2020Updated 6 years ago
- 🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!☆2,267Dec 8, 2025Updated 10 months ago
- A project to run fuzzing jobs at scale with Kubernetes.☆147Feb 12, 2021Updated 5 years ago
- Service to scan licenses from source code☆12Aug 14, 2023Updated 3 years ago
- Documenting your Threat Models with HCL☆470Updated this week
- The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…☆174Mar 12, 2024Updated 2 years ago