GuardDog is a CLI tool that allows to identify malicious PyPI and npm packages, Go modules, GitHub actions, or VSCode extensions. It runs a set of heuristics on the package source code (through ...

Skill Seeker is an automated tool that transforms documentation websites, GitHub repositories, and PDF files into production-ready Claude AI skills. Instead of manually reading and summarizing ...

Unlike typical AI tools, NotebookLM is designed to help you interact with sources you upload to notebooks. This means the best way to use NotebookLM efficiently is by populating your notebooks with ...

Abstract: Open-source, community-driven package repositories see thousands of malware packages each year, but do not currently run automated malware detection systems. In this work, we explore the ...

PyStoreRAT spreads via fake GitHub tools using small Python or JavaScript loaders to fetch HTA files and install a modular ...

Python is one of the most popular languages for developing AI and computer vision projects. With the power of OpenCV and face detection libraries, you can build smart systems that can make decisions ...

Abstract: This study studies the effectiveness of file-level and data source-level ingest modules in recovering g-code files in digital forensic investigations. Four scenarios were designed to ...

The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms. OpenVSX and ...

The North Korean threat actors behind the Contagious Interview campaign have continued to flood the npm registry with 197 more malicious packages since last month. According to Socket, these packages ...