Detect Glassworm & trojan source attacks that employ unicode bidi attacks to inject malicious code
-
Updated
Sep 8, 2026 - JavaScript
#
glassworm
Here are 7 public repositories matching this topic...
Open-source supply-chain security scanner, local and offline. Matches known-malicious packages, extensions, plugins, providers, container images and CI actions in 15 ecosystems, including transitive lockfile dependencies. Detects GlassWorm, Shai-Hulud and 350+ threat indicators. GitHub Action, MCP server, CycloneDX SBOMs, SLSA grading.
docker rust cli golang npm security scanner pypi supply-chain sarif devsecops threat-intelligence malware-detection sbom github-action cyclonedx slsa glassworm elvatis
-
Updated
Oct 3, 2026 - TypeScript
a modular offensive security framework designed for executing Unicode-based attacks, like those seen in the "GlassWorm" compromises
javascript unicode obfuscation malware python3 obfuscator malware-research zero-width-space malware-development av-evasion av-bypass zero-width-character invisible-characters zero-width-joiner zero-width-characters glassworm trojan-source
-
Updated
Feb 26, 2026 - Python
AI code security scanner MCP server — detects invisible Unicode, Trojan Source, homoglyphs, Glassworm steganography, rules file backdoors, and dependency attacks in AI-generated code. Static analysis + CodeBERT deep learning. Runs locally.
security unicode mcp static-analysis code-analysis ai-security homoglyph supply-chain-security codebert mcp-server glassworm trojan-source
-
Updated
May 4, 2026 - HTML
Audit VS Code / Cursor / Windsurf extensions for supply-chain risk: unclaimed and squattable Open VSX namespaces, publisher drift between the Marketplace and Open VSX, and hidden-Unicode payloads (the GlassWorm trick). Offline, single Go binary.
golang extension vscode cursor security-tools malware-detection windsurf supply-chain-security open-vsx glassworm extension-security
-
Updated
Sep 12, 2026 - Go
Zero-dependency detection tools for npm supply chain attacks (Shai-Hulud, CanisterWorm, GlassWorm)
bash cli npm security scanner supply-chain devsecops malware-detection nodejs-security shai-hulud glassworm canisterworm
-
Updated
Mar 24, 2026 - Shell
Add this topic to your repo
To associate your repository with the glassworm topic, visit your repo's landing page and select "manage topics."