Detect Glassworm & trojan source attacks that employ unicode bidi attacks to inject malicious code
-
Updated
Jul 23, 2026 - JavaScript
#
glassworm
Here are 6 public repositories matching this topic...
Open-source supply-chain security scanner for npm, PyPI, Cargo, Go, RubyGems, Composer, NuGet, Docker, VS Code extensions, GitHub Actions, IaC and Solana C2. Detects GlassWorm, Shai-Hulud and 350+ threat indicators. CycloneDX SBOMs, SLSA provenance grading, attack-chain correlation.
docker rust cli golang npm security scanner pypi supply-chain sarif devsecops threat-intelligence malware-detection sbom github-action cyclonedx slsa glassworm elvatis
-
Updated
Aug 16, 2026 - TypeScript
a modular offensive security framework designed for executing Unicode-based attacks, like those seen in the "GlassWorm" compromises
javascript unicode obfuscation malware python3 obfuscator malware-research zero-width-space malware-development av-evasion av-bypass zero-width-character invisible-characters zero-width-joiner zero-width-characters glassworm trojan-source
-
Updated
Feb 26, 2026 - Python
AI code security scanner MCP server — detects invisible Unicode, Trojan Source, homoglyphs, Glassworm steganography, rules file backdoors, and dependency attacks in AI-generated code. Static analysis + CodeBERT deep learning. Runs locally.
security unicode mcp static-analysis code-analysis ai-security homoglyph supply-chain-security codebert mcp-server glassworm trojan-source
-
Updated
May 4, 2026 - HTML
Zero-dependency detection tools for npm supply chain attacks (Shai-Hulud, CanisterWorm, GlassWorm)
bash cli npm security scanner supply-chain devsecops malware-detection nodejs-security shai-hulud glassworm canisterworm
-
Updated
Mar 24, 2026 - Shell
Improve this page
Add a description, image, and links to the glassworm topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the glassworm topic, visit your repo's landing page and select "manage topics."