Autonomous “Shai-Hulud” engine that ingests malicious NPM package advisories from OSV, tracks versions and metadata, and maintains a continuously updated threat intelligence database.
-
Updated
Jan 8, 2026 - JavaScript
Autonomous “Shai-Hulud” engine that ingests malicious NPM package advisories from OSV, tracks versions and metadata, and maintains a continuously updated threat intelligence database.
World-class security standard for npm packages. Automated threat detection, supply chain analysis, and 0-100 security scores. Because in 2025, we can do better than the Wild West
Security scanner for Node.js projects with AI-powered vulnerability detection and package recommendations
Add a description, image, and links to the package-security topic page so that developers can more easily learn about it.
To associate your repository with the package-security topic, visit your repo's landing page and select "manage topics."