keyhog

Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...

credactor

Credactor 找到密钥。修复它。干净提交。 密钥扫描器擅长拉响警报，却不太能帮你把火扑灭。它们丢给你一份泄露凭据的清单，剩下的清理工作全归你。Credactor 补上了这个闭环：它找到硬编码的密钥并就地重写，让一次泄露从检测到修复只需一条命令。 让凭据远离源代码是一项基线安全实践，而非可选项。Credactor 让守住这条基线变得成本低廉——无论是在提交前的本机上，还是在合并前的 CI 中。你可以单独运行它，也可以与已经信任的扫描器搭配使用。 Credactor 找到这个： dbpassword = "h8Tq2vKp9mRz4Wd"...

rusty-hog

Rusty Hog 是一个用 Rust 构建的高性能秘密扫描器，基于用 Python 编写的 TruffleHog。Rusty Hog 提供以下二进制文件： Ankamali Hog: 扫描 Google 文档中的秘密。 Berkshire Hog: 扫描 S3 存储桶中的秘密。 Choctaw Hog: 扫描 Git 仓库中的秘密。 Duroc Hog: 扫描目录、文件和归档中的秘密。 Essex Hog: 扫描 Confluence Wiki 页面中的秘密。 Gottingen Hog: 扫描 JIRA 议题中的秘密。 Slack Hog: 扫描 Slack 频道中的秘密。 目录...

apkprobe

APKprobe Descompilador de APK y escáner de secretos para investigación de seguridad en Android. Extrae automáticamente claves de API , endpoints , tokens y otras credenciales filtradas de aplicaciones Android. Funciona con archivos .apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab...

noseyparker

Nosey Parker ahora es reemplazado por Titus. Nosey Parker está oficialmente retirado Consulte nuestra publicación de anuncio https://www.praetorian.com/blog/titus-open-source-secret-scanner/. El repositorio de Titus se puede encontrar en https://github.com/praetorian-inc/titus Descripción general...

guardx

🛡️ Guard Toolkit — Full Tutorial Security toolkit: Secret S...

MAL-2026-6795 Malicious code in zod-pino444 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560c3d47344d4da5dffac230236b5248d2f1856c221ffac7ff72d4e3b197957b Package [email protected] is a credential/secret harvester disguised behind a benign-sounding name. scripts/postinstall-agent.mjs is a...

Malicious code in logger-daemon-regex (npm)

The npm package logger-daemon-regex is a full-spectrum information stealer and remote-control agent disguised as a "Node.js integration layer for Autodesk Forge" all bin names are forge-. A postinstall lifecycle hook chains five scripts postinstall-clipboard-event, ensure-dist,...

sentinel

Sentinel — Agentic Code & System Quality Guardian Production-...

JavaScript Sensitive Information Disclosure Scanner

This tool performs automated crawling and heuristic scanning of JavaScript files linked within a target website. It identifies exposed secrets such as API keys, access tokens, cloud credentials, private keys, and database passwords that may be unintentionally published within frontend resources. ...

EUVD-2025-198914

Malicious code in @postman/secret-scanner-wasm npm...

Malicious code in @postman/secret-scanner-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d1604689ef91985fbc1fe9f8958eb7a50835e71b7cfa4125de687ca37c2d19 The package @postman/secret-scanner-wasm was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190911 Malicious code in @postman/secret-scanner-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d1604689ef91985fbc1fe9f8958eb7a50835e71b7cfa4125de687ca37c2d19 The package @postman/secret-scanner-wasm was found to contain malicious code. Source: google-open-source-security...