Code
Malware Detection
Malware Detection watches the dependencies a project pulls in. It continuously checks them for malicious packages across public registries.
What it is
Attackers sometimes publish malicious packages to public registries, hoping projects will install them. This module checks dependencies against known malicious packages on an ongoing basis. It covers registries such as npm and PyPI.
Key capabilities
- Checks dependencies for malicious packages.
- Covers the npm registry.
- Covers the PyPI registry.
- Runs continuously, not just once.
- Alerts when a malicious package is found.
Who it’s for
It fits teams that install packages from public registries. It helps engineers catch malicious dependencies before they cause harm. It suits any project that relies on external packages.