bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

Malicious code in kafka-roller (PyPI)

Source: ossf-package-analysis 4b68fa52500e16cab90e8038ae96e2ba1be6c448a8caa40ab3e46dc6d3c26436 The OpenSSF Package Analysis project identified 'kafka-roller' @ 99.0.0 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in kafka-helmsman (PyPI)

Source: ossf-package-analysis a2d266a2b4e9df8f2466cfb34e58fe98c636cb75d4ad1ec08cee919bd9a86588 The OpenSSF Package Analysis project identified 'kafka-helmsman' @ 99.0.1 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

sashay

Sashay Introducción ℹ️ Sashay es un instalador automático multifunción para herramientas útiles basadas en Linux. Hay más de 340 herramientas disponibles. Instalación⬇️ pip install -U sashay Categorías de herramientas Information Gathering Vulnerability Scanner Exploitation Tools Wireless Testing...

Malicious code in kafka-helmsman (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75536e8621da28a0e941bd4a607da879a64ab71214e908992bf14840ed9a20b2 The sdist for kafka-helmsman 99.0.5 is a dependency-confusion placeholder targeting the internal Tesla project name...

MAL-2026-17702 Malicious code in kafka-helmsman (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75536e8621da28a0e941bd4a607da879a64ab71214e908992bf14840ed9a20b2 The sdist for kafka-helmsman 99.0.5 is a dependency-confusion placeholder targeting the internal Tesla project name...

magika

Magika Magika es una novedosa herramienta de detección de tipos de archivo impulsada por IA que se apoya en los recientes avances del aprendizaje profundo para proporcionar una detección precisa. Internamente, Magika emplea un modelo personalizado y altamente optimizado que solo pesa unos pocos M...

MAL-2026-17703 Malicious code in kafka-roller (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4490e03c9b281c985d7cc5c877d359f8f3789a2ec44421602137c461ac4a2a52 The package is published to PyPI under the name kafka-roller with metadata impersonating Tesla's teslamotors/kafka-helmsman project homepage points a...

Malicious code in kafka-roller (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4490e03c9b281c985d7cc5c877d359f8f3789a2ec44421602137c461ac4a2a52 The package is published to PyPI under the name kafka-roller with metadata impersonating Tesla's teslamotors/kafka-helmsman project homepage points a...

crlfi

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install crlfi Run bellow command to check crlfi -h Configurations 2. We integrated with the Telegram API to receive instant notificatio...

safe-chain

Aikido Safe Chain ✅ Bloquea malware en portátiles de desarrolladores y CI/CD ✅ Compatible con npm y PyPI y con más gestores de paquetes en camino ✅ Bloquea paquetes con menos de 48 horas de antigüedad sin romper tu build ✅ Sin tokens, gratuito, sin compartir datos de build ¿Necesitas protección m...

honeypot-auditor

.. | :: H-AUDITOR :: v1.0.3 :: "DIALING IN... CARRIER DETECTED" :: | |------------------------------------------------------------------------------| | "warez? nah. headers. we trade banners, not bins." | | "if it answers any password, it ain't production — it's a lure." | | "respect the sysop...

harpoon

Harpoon Herramienta CLI de OSINT / Threat Intel. Instalación Requisitos Como requisito previo para Harpoon, debes instalar los requisitos de lxml. En Debian/Ubuntu: sudo apt-get install libxml2-dev libxslt-dev python3-dev. En Fedora: sudo dnf install sqlite-devel automake bzip2 bzip2-devel...

aura

.. image:: https://cdn.sourcecode.ai/imgs/logotype.png :target: https://aura.sourcecode.ai/ ====== .. class:: center |homepageflair| |docsflair| |dockerflair| |licenseflair| |travisflair| |pypiflair| Auditoría de código fuente y análisis estático de código Aura es un framework de análisis estátic...

HiddenEyeReborn

Introduction The HiddenEye: Reborn tool is a project aimed at exploiting human error. As my second attempt at creating a comprehensive tool for this purpose, it presently has numerous phishing features. We intend to add more functionality soon. Keep up with our progress by checking out our roadma...

tartufo

!WARNING Este proyecto ya no se mantiene activamente. tartufo busca secretos en repositorios git, profundizando en el historial de commits y las ramas. Esto es efectivo para encontrar secretos confirmados accidentalmente. tartufo también puede ser usado por scripts de pre-commit de git para...

modelscan

ModelScan: モデルシリアライゼーション攻撃からの保護 機械学習（ML）モデルは、インターネット上、チーム内、チーム間で公開共有されています。基盤モデル（Foundation Models）の台頭により、公開されているMLモデルは、さらなるトレーニングやファインチューニングのためにますます消費されるようになっています。MLモデルは、重要な意思決定やミッションクリティカルなアプリケーションの駆動にますます使用されています。 それにもかかわらず、モデルは受信トレイ内のPDFファイルほどの厳格さではまだスキャンされていません。 この状況を変える必要があり、適切なツールがその第一歩です。...

CVE-2026-21016-Malicious-PyPI-Package-Install-Hook-setup.py-Execution-

CVE-2026-21016 – Malicious PyPI Package Install Hook setup.py Execution Program Code Python setup.py - Malicious package that executes during install from setuptools import setup import os This runs on pip install os.system'id /tmp/pwnedbypackage' setup name='harmless-pkg', version='1.0',...

InstaLooter

InstaLooter |starme| .. |starme| image:: https://img.shields.io/github/stars/althonos/InstaLooter.svg?style=social&label=Star :target: https://github.com/althonos/InstaLooter No todo tesoro es plata y oro, compañero. |build| |repo| |versions| |format| |coverage| |doc| |grade| |license|...

maigret

Maigret English · 简体中文 · Français 📖 Documentation Maigret 는 사용자 이름만으로 한 사람에 대한 정보 파일을 수집하며, 수많은 사이트에서 계정을 확인하고 웹 페이지에서 이용 가능한 모든 정보를 수집합니다. API 키가 필요하지 않습니다. AI 프로파일링 데모. 스폰서 Noimosiny는 전문 조사관과 분석가를 위한 종합 OSINT 플랫폼입니다. 250개 이상의 모듈을 통해 이메일, 전화번호, 사용자 이름 역검색을 제공합니다. 강력한 도구로 정보 수집을 자동화하세요...