jestasecurity

jestasecurity/thumper

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

28 good first / help-wanted issues · Python · last activity Jul 2, 2026

222 stars 13 forks 222 watchers Python Apache License 2.0

canary canarytokens credential-theft devsecops endpoint-security honeytoken honeytokens incident-response malware-detection npm npm-security open-source security shai-hulud supply-chain-attack supply-chain-security threat-detection tripwire

View on GitHub Website

28 Open Issues Need Help Last updated: Jul 2, 2026

Open Issues Need Help

View All on GitHub

Dashboard: disable Resolve / Resolve-all while the request is in flight 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

CopyField: clipboard fails over plain http (LAN) — add a fallback 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

UI copy still says "sudo required" / "fs_usage" — inaccurate after the FIFO sensor 4 months ago

bug good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Expose the server version in /healthz and the Settings page 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Modal: close on Escape (and basic focus handling) 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Add a CHANGELOG.md 4 months ago

documentation good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Show a platform badge/icon in the Endpoints table 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Add a Docker (~/.docker/config.json) honeytoken type 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Validate numeric agent CLI args (--poll/--heartbeat/--sync-interval) 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Set a per-page browser tab title (document.title) 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Show the absolute timestamp on hover for relative times (timeAgo) 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Remember the Dashboard auto-refresh interval across reloads (localStorage) 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Strip whitespace from tripwire name on create (match rename behavior) 4 months ago

bug good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Add --help/-h and --version flags to the agent CLI 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Confirm before "Resolve all" alerts on the Dashboard 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

a11y: add aria-labels to icon-only buttons 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Add a GitLab PAT honeytoken type 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Add unit tests for the honeytoken generators (tests/test_generator.py) 4 months ago

good first issue tests

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Docs: add a "How to add a honeytoken type" guide (docs/tokens.md) 4 months ago

documentation good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Add .editorconfig for consistent formatting 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Document THUMPER_ALLOWED_HOOK_CIDRS and THUMPER_SECRET_KEY env vars 4 months ago

documentation good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Assigning a tripwire to an endpoint gives no UI signal that planting is deferred until the next agent sync 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Add GitHub issue and PR templates 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Add an npm (.npmrc) honeytoken type 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Startup Logs 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Fake installation output 4 months ago

bug good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Missing log of Heartbeat succeeded 4 months ago

bug good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire

Change "instances" to "tripwires" in Endpoints page 4 months ago

enhancement good first issue

jestasecurity/thumper

222

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

Python

#canary#canarytokens#credential-theft#devsecops#endpoint-security#honeytoken#honeytokens#incident-response#malware-detection#npm#npm-security#open-source#security#shai-hulud#supply-chain-attack#supply-chain-security#threat-detection#tripwire