https://github.com/hazcod/harkonnen

A hunting script for Sha1-Hulud compromise.
https://github.com/hazcod/harkonnen

Last synced: 19 days ago
JSON representation

A hunting script for Sha1-Hulud compromise.

• Host: GitHub
• URL: https://github.com/hazcod/harkonnen
• Owner: hazcod
• Created: 2025-11-25T08:57:02.000Z (7 months ago)
• Default Branch: main
• Last Pushed: 2025-11-25T08:57:50.000Z (7 months ago)
• Last Synced: 2026-05-29T17:29:19.958Z (26 days ago)
• Language: Go
• Homepage:
• Size: 125 KB
• Stars: 1
• Watchers: 0
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: ReadMe.md

Awesome Lists containing this project

README

          
# harkonnen

Hunting script to find GitHub users and organisations compromised by the Sha1-Hulud NPM worm.


It uses the GitHub Search API to find repositories indicating compromise.

## Example

![Example commandline output](/.github/sample-output.jpeg)

## Usage

Via make:

```zsh

% GITHUB_TOKEN="foo" make

```

Or directly:

```zsh

% GITHUB_TOKEN="foo" go run ./cmd/...

```