notambourine

notambourine/wormhook

npm/node supply-chain malware scanner for Claude Code — tiered hook detecting Shai-Hulud, Axios RAT, SANDWORM_MODE, and remote-eval loaders.

3 good first / help-wanted issues · Shell · last activity Aug 18, 2026

0 stars 0 forks 0 watchers Shell MIT License
View on GitHub
3 Open Issues Need Help Last updated: Aug 18, 2026

Open Issues Need Help

View All on GitHub
Catch the Shai-Hulud 1.0 shai-hulud-workflow.yml IOC that MALWARE_WORKFLOW_RE misses 2 months ago
enhancement good first issue
notambourine/wormhook
0

npm/node supply-chain malware scanner for Claude Code — tiered hook detecting Shai-Hulud, Axios RAT, SANDWORM_MODE, and remote-eval loaders.

Shell
Prune dead version-drift scrape-fallbacks in wormhook-scan.sh 4 months ago
enhancement good first issue
notambourine/wormhook
0

npm/node supply-chain malware scanner for Claude Code — tiered hook detecting Shai-Hulud, Axios RAT, SANDWORM_MODE, and remote-eval loaders.

Shell
Collapse repetitive Tier-0 alert blocks into a data-driven table + builder 4 months ago
enhancement good first issue
notambourine/wormhook
0

npm/node supply-chain malware scanner for Claude Code — tiered hook detecting Shai-Hulud, Axios RAT, SANDWORM_MODE, and remote-eval loaders.

Shell