Packj — a toolkit for detecting malicious libraries in Python and JavaScript.
The developers of the Packj platform, which analyzes the security of libraries, have released an open-source command line tool that allows for the detection of risky constructs in packages that may be associated with malicious activity or the presence of vulnerabilities used to carry out attacks on projects utilizing the examined packages ("supply chain"). Support is provided for package verification in Python and JavaScript languages hosted in the PyPi and NPM directories (in this […]
