Lucene search
+L

1004 matches found

Kitploit
Kitploit
added 2026/09/11 2:09 p.m.11 views

criticality_score

Open Source Project Criticality Score Beta This project is maintained by members of the Securing Critical Projects WG. Goals 1. Generate a criticality score for every open source project. 2. Create a list of critical projects that the open source community depends on. 3. Use this data to...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 1:27 p.m.34 views

allstar

Allstar !IMPORTANT The OpenSSF-hosted Allstar GitHub App has been retired. Allstar, the OpenSSF Scorecard subproject, itself continues to be maintained — you must now run it yourself, either as a GitHub Action or as a service daemon. See ossf/allstar881 for more details. If your organization was...

5.8AI score
SaveExploits0References34
Kitploit
Kitploit
added 2026/09/11 6:36 a.m.15 views

PcapPlusPlus

...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/11 12:30 a.m.10 views

SecureML

SecureAIML 🔐 Enterprise-Ready AI Model Security built on OpenSSF Model Signing SecureAIML is the "Stripe for model security" - making enterprise-grade AI model protection accessible, user-friendly, and production-ready for every organization. Why SecureAIML? In the era of AI/ML, model security is...

6AI score
SaveExploits0References15
Kitploit
Kitploit
added 2026/09/10 8:42 p.m.18 views

guac

GUAC: Gráfico para la Comprensión de la Composición de Artefactos Nota: GUAC está en desarrollo activo: si estás interesado en contribuir, consulta la guía para colaboradores. GUAC es un proyecto en incubación de OpenSSF bajo el Grupo de Trabajo de Integridad de la Cadena de Suministro. Gráfico...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/10 7:10 p.m.13 views

scorecard

OpenSSF Scorecard...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 4:11 p.m.7 views

allstar

Allstar !IMPORTANT La GitHub App de Allstar alojada por OpenSSF ha sido retirada. Allstar, el subproyecto de OpenSSF Scorecard, continúa manteniéndose: ahora debes ejecutarlo tú mismo, ya sea como una GitHub Action o como un daemon de servicio. Consulta ossf/allstar881 para más detalles. Si tu...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 12:17 p.m.7 views

authelia

!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...

5.8AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/10 9:03 a.m.8 views

slsa

SLSA "salsa" es Niveles de cadena de suministro para artefactos de software SLSA pronunciado "salsa" es un marco de seguridad desde el origen hasta el servicio, que brinda a cualquier persona que trabaje con software un lenguaje común para aumentar los niveles de seguridad del software y la...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/09 4:15 p.m.5 views

Nest

!Issueshttps://img.shields.io/github/issues/owasp/nest?color=blue&style=...

5.8AI score
SaveExploits0References17
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/06 8:35 p.m.11 views

Malicious code in oce-configurator-wireless-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191e4a78bf46781b56b290aac7b804fd9470b1ac189896b950afbaba548183e6 Package name resembles an internal Swisscom OCE package and is published at version 9999.0.0 to win resolution against a private registry. The...

5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/09/06 8:35 p.m.10 views

MAL-2026-15940 Malicious code in oce-configurator-wireless-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191e4a78bf46781b56b290aac7b804fd9470b1ac189896b950afbaba548183e6 Package name resembles an internal Swisscom OCE package and is published at version 9999.0.0 to win resolution against a private registry. The...

5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/06 8:35 p.m.14 views

Malicious code in omni-channel-order-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5286224ab4427b1e85bbdfd5e57b9d96fc9736504d17f2f31839562f19b88ee The package name and 9999.0.0 version are consistent with a dependency-confusion lure targeting an internal omni-channel-order-frontend package...

5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/06 8:25 p.m.9 views

Malicious code in ocfe-tv-subscription-center-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b1dcb639402e9d94a5f6f171e32ed97eb7064f7a557b1f7382bf832a4415ba Package name resembles an internal-scoped name and uses an implausibly high version 9999.0.0 consistent with dependency-confusion targeting. The...

5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/09/06 8:15 p.m.13 views

MAL-2026-15939 Malicious code in omni-channel-oid-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8c0fe84f28408bb01adee4ff47b26ed354143c53975559c5d5f2b0a06a61ce omni-channel-oid-frontend ships a preinstall.js lifecycle script that fires automatically on npm install. The script collects os.hostname,...

5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/09/03 11:45 p.m.9 views

MAL-2026-15909 Malicious code in 1nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ec2f3aadbe93023b18621b07d44da99f2d1a232a2905add322260456c9ef43 Package name typosquats nestjs and declares postinstall: node index.js in package.json, so index.js runs automatically during npm install. index.js...

5.7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/03 11:35 p.m.16 views

Malicious code in 0nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eee258f343282c30f3efc6b5effc8aac283b7b02421433c14dee3e14f27aa3 Package name 0nestjs targets developers mistyping nestjs. On npm install, the postinstall hook node index.js executes automatically and performs two...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/02 2:11 a.m.15 views

Malicious code in eslint-rxjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2794273ee7e40da4b37c017636209acf1402b1104ab5fc265a43cc7d83228e72 eslint-rxjs is a masquerade package whose npm metadata is internally inconsistent: the name references ESLint/RxJS, the description reads 'Integrate...

6AI score
SaveExploits0References2
OSV
OSV
added 2026/09/02 2:11 a.m.4 views

MAL-2026-15812 Malicious code in eslint-rxjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2794273ee7e40da4b37c017636209acf1402b1104ab5fc265a43cc7d83228e72 eslint-rxjs is a masquerade package whose npm metadata is internally inconsistent: the name references ESLint/RxJS, the description reads 'Integrate...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/01 4:54 p.m.13 views

allstar v4.6

Allstar !IMPORTANT The OpenSSF-hosted Allstar GitHub App has been retired. Allstar, the OpenSSF Scorecard subproject, itself continues to be maintained — you must now run it yourself, either as a GitHub Action or as a service daemon. See ossf/allstar881 for more details. If your organization was...

5.8AI score
SaveExploits0References35
Rows per page
Query Builder