Skip to content
#

chaindrop

Star

Here are 3 public repositories matching this topic...

Language: All
Filter by language
All 3 Python 1 Shell 1 TypeScript 1

gensecaihq / Shai-Hulud-2.0-Detector

Star 150

GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.

nodejs npm security ioc sarif devsecops code-scanning malware-detection threat-detection credential-theft github-actions github-action dependency-scanning open-source-security supply-chain-security npm-security shai-hulud supply-chain-attack chaindrop shai-hulud-2
  • Updated Sep 5, 2026
  • TypeScript

Drasrax / npm-shai-hulud-scanner

Star 15

Comprehensive detection tool for NPM supply chain attacks, specifically designed to identify and prevent the Shai-Hulud worm and Shai-Hulud 2-0-0 that compromised 1193+ packages including CrowdStrike npm packages in 2025.

nodejs npm npm-package supply-chain worm wiz security-tools malware-detection github-actions-security cve-2025-54313 shai-hulud npm-supply-chain bun-payload typosquatting-detection ioc-database chaindrop flooddroppper
  • Updated Aug 7, 2026
  • Python

Add this topic to your repo

To associate your repository with the chaindrop topic, visit your repo's landing page and select "manage topics."

Learn more