Supply-chain security for npm and PyPI: scans install scripts and native binaries (Ghidra decompilation, YARA, AI classification), checks OSV malware advisories, and gates PRs with a GitHub Action.

3 stars 0 forks 3 watchers TypeScript MIT License
ai cyclonedx devsecops ghidra github-actions install-scripts malware-detection npm osv pypi sbom security software-supply-chain supply-chain yara
2 Open Issues Need Help Last updated: Sep 29, 2026

Open Issues Need Help

View All on GitHub

Supply-chain security for npm and PyPI: scans install scripts and native binaries (Ghidra decompilation, YARA, AI classification), checks OSV malware advisories, and gates PRs with a GitHub Action.

TypeScript
#ai#cyclonedx#devsecops#ghidra#github-actions#install-scripts#malware-detection#npm#osv#pypi#sbom#security#software-supply-chain#supply-chain#yara

Supply-chain security for npm and PyPI: scans install scripts and native binaries (Ghidra decompilation, YARA, AI classification), checks OSV malware advisories, and gates PRs with a GitHub Action.

TypeScript
#ai#cyclonedx#devsecops#ghidra#github-actions#install-scripts#malware-detection#npm#osv#pypi#sbom#security#software-supply-chain#supply-chain#yara