#1Dependency scanning, SBOM generation, package integrity, and supply chain risk tools.
Kitploit recommended
dshapi/ai-spmThis opensource project dedicated to implementing Enterprise level AI-SPM. By doing so organizations can proactively protect their AI systems from…
x86byte/adm-zip_lpe-pocCVE-2026-102282: Local Privilege Escalation via SUID/SGID preservation during archive extraction
gautamvarmadatla/mcpsafetywardenProxy server that wraps MCP servers with behavioral profiling, security scanning, risk gating, and safe execution. Detects prompt injection,…
doyensec/malicious-devfile-registryCVE-2024-0402 exploit for GitLab Workspaces using a malicious Devfile Registry with path-traversal archive to overwrite authorized_keys and gain SSH…
ugurrates/teampcp-supply-chain-attackCVE-2026-33634 (CVSS 9.4) — The most impactful CI/CD supply chain attack of 2026 so far.
bekk/retire.jsretire.js has a new home
agentshield-ai/sigma-aiSigma detection rules for AI agent security monitoring
r0binak/xzk8sDockerfile and Kubernetes manifests for reproduce CVE-2024-3094
jackadamson/cve-2021-26700Proof-of-concept for CVE-2021-26700: remote code execution in the VSCode npm-script extension via malicious workspace settings.json, with detailed…
koblers/np-auditStatic security analysis for npm packages. Detects obfuscated code, malicious patterns, and known vulnerabilities before installation.
paultendo/confusable-visionThe world's first font-by-font confusables dataset: which Unicode characters look alike, measured from the outlines of 322 fonts at the size people…
rocketchat/layneA doggo that helps look for security issues in your repositories.
aquasecurity/secfixes-trackerForked from https://gitlab.alpinelinux.org/kaniini/secfixes-tracker
owasp/donkaiDonkAI is a hands-on lab for the OWASP Top 10 for LLM Applications (2025) - no real LLM required.
tayyabt/trustlockA Git-native dependency admission controller. Evaluates trust signals on every dependency change and blocks commits or builds when packages fail your…
0xlane/xz-cve-2024-3094XZ Backdoor Extract(Test on Ubuntu 23.10)
martyx00/vulnfanatic-ngBianryNinja plugin for identifying vulnerabilities in decompiled binaries with both programmatic scans and LLM support.
ltmthink/cve-2023-51385_test一个验证对CVE-2023-51385
