gensecaihq / Shai-Hulud-2.0-DetectorView on GitHub
GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.
150Sep 12, 2026Updated this week

Alternatives and similar repositories for Shai-Hulud-2.0-Detector

Users that are interested in Shai-Hulud-2.0-Detector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

Sorting:

Are these results useful?