Demonstrates how a malicious dependency could negatively impact the build output.
☆28Aug 11, 2023Updated 3 years ago
Alternatives and similar repositories for malicious-dependencies
Users that are interested in malicious-dependencies are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆13Oct 30, 2023Updated 2 years ago
- Java archive implant toolkit.☆64Apr 20, 2025Updated last year
- ILANDS Sensor traffic data analysis software packages☆10Apr 9, 2026Updated 4 months ago
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆35Apr 4, 2023Updated 3 years ago
- My personal monorepo, containing my dotfiles and related infrastructure☆14Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A cli that can be used to query various online vulnerability sources such as the NVD or GHSA. The CLI and docker images can be used to mi…☆176Aug 31, 2026Updated last week
- Source Code Transparency☆11Sep 25, 2023Updated 2 years ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 2 years ago
- Repository for the Huntsville/Madison DevOps for Defense Meetup. Join us at meetup.com.☆12Aug 10, 2024Updated 2 years ago
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆41Dec 12, 2023Updated 2 years ago
- Specification for uri templates.☆16Dec 25, 2016Updated 9 years ago
- The Artifacts for ICSE 2023 paper: Bad Snakes: Understanding and Improving Python Package Index Malware Scanning☆13Feb 8, 2026Updated 6 months ago
- CodeQL Guide☆11Jan 12, 2022Updated 4 years ago
- My set of notes and resources for Microsoft and other exams☆15Oct 20, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A collection of my Semgrep rules☆54Jul 4, 2023Updated 3 years ago
- Verify that systems operate under your sole control☆21Updated this week
- Sharing software supply chain security open source projects☆54Dec 19, 2022Updated 3 years ago
- Program to generate vulnerable and fixed synthetic test cases expressing specific flaws.☆16Jul 24, 2026Updated last month
- ☆14Apr 23, 2019Updated 7 years ago
- ☆21Mar 7, 2024Updated 2 years ago
- OSCAL reusable component definitions library☆17Mar 14, 2025Updated last year
- ☆19Jul 30, 2024Updated 2 years ago
- ☆14Jan 8, 2026Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- The repository contains IOCs in CSV format for APT, Cyber Crimes, Malware and Trojan and whatever I found as part of hunting and research☆12Jun 10, 2017Updated 9 years ago
- This's a Python package for the Saxon/C 1.2.1, an XML processor from Saxonica. Currently, it packs the open-source version or the home ed…☆16Dec 22, 2024Updated last year
- The tutorial of "Kubernetes Security for Microservices"☆14Oct 3, 2023Updated 2 years ago
- Creates an ATT&CK Navigator map of an Adversary Emulation Plan☆17Sep 4, 2021Updated 5 years ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated last year
- FedRAMP Automation☆16Nov 10, 2023Updated 2 years ago
- Javascript Code Injection for Debugging☆21Nov 11, 2023Updated 2 years ago
- Nuclei plugins to audit Chrome extensions☆66Jul 16, 2024Updated 2 years ago
- A tool for analyzing the attack surface of an application☆19Mar 5, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- An interactive way to learn threat modeling☆17Feb 14, 2019Updated 7 years ago
- ☆33Updated this week
- ☆12Jul 30, 2026Updated last month
- A KeePass plugin allowing you to open your database using either a master password OR an X509 certificate.☆22Dec 3, 2022Updated 3 years ago
- POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF☆59Sep 20, 2023Updated 2 years ago
- Ransomware base in Java for all operating systems☆20Jun 13, 2017Updated 9 years ago
- A curated collection of tools and resources for building security with a developer first approach.☆30Jul 29, 2022Updated 4 years ago