dotenv-diff

dotenv-diff Scan your codebase to detect every environment variable reference. It helps you catch missing, unused, duplicated, and misused variables early, before they cause runtime errors. First class support for SvelteKit, Next.js, and Nuxt. Also works well in modern JavaScript/TypeScript...

cve-lite-on-pi

cve-lite-on-pi A short write-up of running CVE Lite CLI against the pi monorepo, and what it found. Background This experiment was prompted by the article "OWASP CVE Lite CLI – New Tool to Scan for Vulnerabilities in Your Projects" CyberSecurityNews. What is CVE Lite CLI? CVE Lite CLI is a...

OmniSec-Hex

🛡️ OmniSec-Hex OmniSec-Hex is an advanced, high-impact cybersecurity monorepo consolidating six powerhouse client-side security and sovereign intelligence workbanks. Operating entirely within browser-local memory environments with absolute data lockdown, this ecosystem delivers cross-vertical...

EU_compliance_MCP

EU Regulations MCP Server ⚰️ RETIRED — folded into ansvar-mcp-fleet 2026-07-07 This standalone repo is archived. The eu-regulations corpus now lives at Ansvar-Systems/ansvar-mcp-fleet under mcps/eu-regulations/ fold: fleet PR 594; cutover: deploy PR 653, live 2026-07-07. Production serves the...

fix-react2shell-next

fix-react2shell-next Un comando per risolvere CVE-2025-66478 React 2 Shell RCE nella tua app Next.js / React RSC. npx fix-react2shell-next Aggiornamenti di versione deterministici secondo gli advisory ufficiali. Cosa fa 1. Scansiona ricorsivamente tutti i file package.json gestisce monorepo 2...

Malicious code in jaeger-ui-monorepo (npm)

--- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-xstream-run (npm)

The package cycle-monorepo-sandbox-xstream-run was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-rxjs-run (npm)

The package cycle-monorepo-sandbox-rxjs-run was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-rxjs-adapter (npm)

The package cycle-monorepo-sandbox-rxjs-adapter was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-http (npm)

The package cycle-monorepo-sandbox-http was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-rx-run (npm)

The package cycle-monorepo-sandbox-rx-run was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-dom (npm)

The package cycle-monorepo-sandbox-dom was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-most-adapter (npm)

The package cycle-monorepo-sandbox-most-adapter was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-isolate (npm)

The package cycle-monorepo-sandbox-isolate was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-rx-adapter (npm)

The package cycle-monorepo-sandbox-rx-adapter was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-xstream-adapter (npm)

The package cycle-monorepo-sandbox-xstream-adapter was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-jsonp (npm)

The package cycle-monorepo-sandbox-jsonp was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-base (npm)

The package cycle-monorepo-sandbox-base was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cycle-monorepo-sandbox-most-run (npm)

The package cycle-monorepo-sandbox-most-run was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in codex-monorepo (npm)

Source: ossf-package-analysis 9c0b0d3723aea4e9ace65a23c56b8f951b48f31f09558674bc6de5e788c8c7de The OpenSSF Package Analysis project identified 'codex-monorepo' @ 8.1.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...