notambourine

notambourine/wormhook

npm/node supply-chain malware scanner for Claude Code — tiered hook detecting Shai-Hulud, Axios RAT, SANDWORM_MODE, and remote-eval loaders.

0 stars 0 forks 0 watchers Shell MIT License
View on GitHub
3 Open Issues Need Help Last updated: Aug 18, 2026

Open Issues Need Help

View All on GitHub
Catch the Shai-Hulud 1.0 shai-hulud-workflow.yml IOC that MALWARE_WORKFLOW_RE misses about 1 month ago
enhancement good first issue
notambourine/wormhook
0

npm/node supply-chain malware scanner for Claude Code — tiered hook detecting Shai-Hulud, Axios RAT, SANDWORM_MODE, and remote-eval loaders.

Shell
Prune dead version-drift scrape-fallbacks in wormhook-scan.sh 3 months ago
enhancement good first issue
notambourine/wormhook
0

npm/node supply-chain malware scanner for Claude Code — tiered hook detecting Shai-Hulud, Axios RAT, SANDWORM_MODE, and remote-eval loaders.

Shell
Collapse repetitive Tier-0 alert blocks into a data-driven table + builder 3 months ago
enhancement good first issue
notambourine/wormhook
0

npm/node supply-chain malware scanner for Claude Code — tiered hook detecting Shai-Hulud, Axios RAT, SANDWORM_MODE, and remote-eval loaders.

Shell