depx

depx 恶意软件包与供应链情报 特点 • 安装 • 用法 • 运行 depx • JSON • 加入 Discord depx 是一个快速、被动的供应链情报 CLI。它通过匹配 OpenSSF 恶意软件包 数据（MAL-，OSV 格式）以及从 X（Grok API） 每小时刷新一次的活动情报订阅源，告知你某个软件包是否已知恶意 （劫持发布、凭据窃取程序、安装脚本后门）。 它能在几秒钟内回答四个问题： 1. 最近有什么被攻陷了？ 新披露的恶意软件包实时订阅源。 2. 这个特定软件包安装安全吗？ 在添加之前检查任何软件包。 3. 我是否已经在系统上安装了恶意软件？ 审计本地锁定文件和...

Malicious code in @zalastax/nolb-depx (npm)

The package @zalastax/nolb-depx was found to contain malicious code...

MAL-2025-11142 Malicious code in @zalastax/nolb-depx (npm)

The package @zalastax/nolb-depx was found to contain malicious code...

MAL-2025-2204 Malicious code in depx-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a69e0a710cd2cb5b4880fae8eb37ba76afea9f442c898ab7e528965336f75392 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in depx-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a69e0a710cd2cb5b4880fae8eb37ba76afea9f442c898ab7e528965336f75392 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...