https://github.com/z8run/aegis

Supply-chain security scanner for npm packages. Detect malicious code, typosquatting, and compromised dependencies before you install them.

cli cve developer-tools devsecops malware-detection npm npm-audit npm-security package-security rust sarif security static-analysis supply-chain tree-sitter typosquatting vulnerability-scanner

Last synced: 04 Apr 2026