gensecaihq/Shai-Hulud-2.0-Detector

GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.

语言：TypeScript · GitHub 星标：153 · Fork：33

话题：chaindrop · code-scanning · credential-theft · dependency-scanning · devsecops · github-action · github-actions · ioc

在 GitHub 上查看原仓库