Alternatives and similar repositories for bandit4mal:

Users that are interested in bandit4mal are comparing it to the libraries listed below

• assuremoss / lastpymile
  A reimplementation of LastPyMile: A Python-based library to Identify the differences between build artifacts of PyPI packages and the res…
  ☆15Updated 3 years ago
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆73Updated last month
• vuduclyunitn / software_supply_chain_papers
  This repository contains a list of papers about software supply chain
  ☆25Updated 7 months ago
• s3c2 / vfcfinder
  VFCFinder: Searching for the Missing Vulnerability Fixing Commits
  ☆25Updated last year
• githubnext / amalfi-artifact
  Artifact accompanying our ICSE '22 paper "Practical Automated Detection of Malicious npm Packages"
  ☆42Updated 2 years ago
• lyvd / bad-snakes-icse23-artifacts
  The Artifacts for ICSE 2023 paper: Bad Snakes: Understanding and Improving Python Package Index Malware Scanning
  ☆10Updated last year
• osssanitizer / maloss
  Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages
  ☆127Updated 2 years ago
• DataDog / malicious-software-packages-dataset
  An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.
  ☆172Updated this week
• SAP / project-kb
  Home page of project "KB"
  ☆116Updated last month
• Aurore54F / JStap
  Modular static malicious JavaScript detection system
  ☆66Updated 4 years ago
• ossf / malicious-packages
  A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…
  ☆281Updated this week
• cristianstaicu / SecBench.js
  ☆29Updated 3 months ago
• IQTLabs / pypi-scan
  Scan pypi for typosquatting
  ☆38Updated last year
• WOOSEUNGHOON / Centris-public
  ☆54Updated last year
• lxyeternal / pypi_malregistry
  The repository has collected about 10,000 malicious pypi packages. This dataset is the work of the ASE 2023 paper "An Empirical Study of…
  ☆73Updated last month
• IQTLabs / software-supply-chain-compromises
  A dataset of software supply chain compromises. Please help us maintain it!
  ☆127Updated 2 years ago
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆141Updated 10 months ago
• ossf / package-feeds
  Feed parsing for language package manager updates
  ☆76Updated last month
• purs3lab / Argus
  ☆42Updated 6 months ago
• rsc-dev / pypi_malware
  PyPI malware packages
  ☆58Updated 6 years ago
• Aurore54F / DoubleX
  Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale
  ☆71Updated 3 years ago
• lkpsg / ccscanner
  A C/C++ dependency scanner
  ☆38Updated last year
• JafarAkhondali / Morefixes
  MoreFixes: A Large-Scale Dataset of CVE Fix Commits Mined through Enhanced Repository Discovery
  ☆18Updated last month
• clouditor / cloud-property-graph
  The Cloud Property Graph is based on a Code Property Graph and tries to connect static code analysis and Cloud runtime assessment.
  ☆22Updated 3 weeks ago
• tree-wizard / fuzz-forest
  ☆25Updated last year
• secureIT-project / CVEfixes
  CVEfixes: Automated Collection of Vulnerabilities and Their Fixes from Open-Source Software
  ☆217Updated 5 months ago
• SAP-samples / cross-language-detection-artifacts
  This repository complements our paper by offering the training dataset, the best-performing models utilized in our real-world experiment,…
  ☆16Updated 10 months ago
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆190Updated last week
• chainguard-dev / bom-shelter
  A place to systematically store software bill of materials (SBOM) documents.
  ☆44Updated last year
• duo-labs / narrow
  Low-effort reachability analysis for third-party code vulnerabilities.
  ☆20Updated last year