Quality-Max/supply-chain-scanner

Detect supply chain attacks in Python dependencies. Catches .pth injection, encoding obfuscation, typosquatting, and compromised packages. Zero dependencies, runs in 2 seconds.

2 best points · 0 comments · 1 Hacker News post · 5 GitHub stars · View on GitHub

Hacker News discussions

• Show HN: Pytest tests catching Python supply chain attacks (litellm .pth vector) (2 points, 0 comments, by qualitymax, 2026-03-26)