Demonstrates how a malicious dependency could negatively impact the build output.
☆28Aug 11, 2023Updated 3 years ago
Alternatives and similar repositories for malicious-dependencies
Users that are interested in malicious-dependencies are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆13Oct 30, 2023Updated 2 years ago
- Java archive implant toolkit.☆64Apr 20, 2025Updated last year
- ILANDS Sensor traffic data analysis software packages☆10Apr 9, 2026Updated 5 months ago
- NVD API 2.0 for python☆14Sep 26, 2024Updated 2 years ago
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆35Apr 4, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- My personal monorepo, containing my dotfiles and related infrastructure☆14Updated this week
- ☆12Jan 14, 2025Updated last year
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 2 years ago
- GitHub Actions Cache Native Malware - for Educational and Research Purposes only.☆173May 8, 2026Updated 4 months ago
- ☆10Mar 16, 2026Updated 6 months ago
- Burp Suite extension for testing Passkey systems.☆76Apr 1, 2025Updated last year
- A library for commenting GitHub with violations from static code analyzer reports.☆22Sep 19, 2026Updated last week
- The Artifacts for ICSE 2023 paper: Bad Snakes: Understanding and Improving Python Package Index Malware Scanning☆13Feb 8, 2026Updated 7 months ago
- OSCAL content that supports the BloSS@M project.☆15Jul 29, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆66May 21, 2024Updated 2 years ago
- ☆13Jul 24, 2023Updated 3 years ago
- A collection of my Semgrep rules☆54Jul 4, 2023Updated 3 years ago
- My set of notes and resources for Microsoft and other exams☆15Oct 20, 2021Updated 4 years ago
- Sharing software supply chain security open source projects☆53Dec 19, 2022Updated 3 years ago
- ☆14Apr 23, 2019Updated 7 years ago
- OSCAL reusable component definitions library☆17Mar 14, 2025Updated last year
- ☆19Jul 30, 2024Updated 2 years ago
- OSCAL (Open Security Controls Assessment Language) on an XProc3 platform☆16Jan 31, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Various resources for Claude Code☆15Feb 26, 2026Updated 7 months ago
- This's a Python package for the Saxon/C 1.2.1, an XML processor from Saxonica. Currently, it packs the open-source version or the home ed…☆16Dec 22, 2024Updated last year
- Creates an ATT&CK Navigator map of an Adversary Emulation Plan☆17Sep 4, 2021Updated 5 years ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated 2 years ago
- This repository will contain all the scripts and techniques we have used to bypass MSTG crackme challenges.☆20Feb 26, 2023Updated 3 years ago
- FedRAMP Automation☆16Nov 10, 2023Updated 2 years ago
- A MCP (Model Context Protocol) server to allow code security reviews using https://osv.dev (Open Source Vulnerabilities Database)☆15Dec 24, 2025Updated 9 months ago
- Nuclei plugins to audit Chrome extensions☆67Jul 16, 2024Updated 2 years ago
- A tool for analyzing the attack surface of an application☆19Mar 5, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- An interactive way to learn threat modeling☆17Feb 14, 2019Updated 7 years ago
- ☆33Sep 21, 2026Updated last week
- POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF☆59Sep 20, 2023Updated 3 years ago
- Ransomware base in Java for all operating systems☆20Jun 13, 2017Updated 9 years ago
- ☆12Jul 30, 2026Updated last month
- ☆116Feb 11, 2026Updated 7 months ago
- ☆20Oct 30, 2020Updated 5 years ago