S

supply-chain

Verified tool registry manager. Manages developer toolchains from git-based registries.

Verified tool registry for kit. Pinned versions, checksums, cosign signatures.

Defanged malware stages from the telnyx 4.87.1/4.87.2 PyPI supply chain compromise

Defanged malware stages from the litellm 1.82.8 PyPI supply chain compromise

Demo vulnerability NodeJS Yarn project for GitLab Package Hunter