gensecaihq/shai-hulud-2.0-detector
GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.
GitHub Actions security score
| gensecaihq/shai-hulud-2.0-detector | |
|---|---|
Score | Start free trial to unlock No credit card required |
Pinnable | |
License | |
Maintained | |
Vulnerabilities | |
Branch protection | |
AI analysis | |
Manual code review | |
Secure publishing | |
Signed commits | |
Automated security tools | |
Popular | Used by 183 open-source projects |
Security Policy | security policy file detected |