Shai-Hulud-2.0-Detector

GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.

npm

View on GitHub Website

147 Stars

34 Forks

7 Watchers

TypeScript Language

mit License

100 SrcLog Score

Cost to Build

$280.5K

Market Value

$1.05M

How is this calculated?

Growth over time

5 data points · 2026-04-09 → 2026-08-08

Stars Forks Watchers

💬

How do you feel about this project?

Ask AI about Shai-Hulud-2.0-Detector

Question copied to clipboard

What is the gensecaihq/Shai-Hulud-2.0-Detector GitHub project? Description: "GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.". Written in TypeScript. Explain what it does, its main use cases, key features, and who would benefit from using it.

Question is copied to clipboard — paste it after the AI opens.

How to clone Shai-Hulud-2.0-Detector

Clone via HTTPS

git clone https://github.com/gensecaihq/Shai-Hulud-2.0-Detector.git

Clone via SSH

[email protected]:gensecaihq/Shai-Hulud-2.0-Detector.git

Download ZIP

Download main.zip

Found an issue?

Report bugs or request features on the Shai-Hulud-2.0-Detector issue tracker:

Open GitHub Issues

Similar to Shai-Hulud-2.0-Detector

meteor yarn nodebestpractices lerna semantic-release pnpm verdaccio np awesome-npm jsdelivr release cnpmjs.org npm-run-all reactopt thanks windows-build-tools npx ifvisible.js eslint-plugin-vue npm-windows-upgrade ndm ungrid greenkeeper notes nrm awesome-awesome-nodejs bolt how-to-npm release-it nps