Liran Tal

🧠 Socially Engineering LLMs 🤖 Hacking AI Agents 🦄 Node.js Secure Coding 🌟 @GitHub Star 🏅 @OpenJS Pathfinder award 4 Security 🥑 DevRel @snyksec

GitHub 473 repos 2.6k followers

Explained projects

npq: The Zero-Trust Bouncer for the npm Ecosystem
npq: The Zero-Trust Bouncer for the npm Ecosystem
Why running npm install is the most dangerous thing you do all day, and how to intercept the threat before it hits your disk.
8 min read · Mar 25, 2026

Yet to be explained

pypi-security-best-practices
Collection of PyPI registry package manager Security Best Practices featuring uv and pip
126 stars
Explain
repolyze
Analyze a git source code repository for health signals and project vitals
TypeScript56 stars
Explain
boxdown
CLI for Local Isolated Environments for Coding Agents
TypeScript31 stars
Explain
discoprint
Classify an artist's discography by theme, mood, and lyrical complexity with Jev (TypeSafe AI), and view it as a colorful terminal dashboard
JavaScript3 stars
Explain
token-compare
Token comparison
HTML2 stars
Explain
paperlens
A CLI to capture, track, and analyze academic paper citations
TypeScript1 stars
Explain
github-action-automerge
Automerge PRs after green CI checks
TypeScript1 stars
Explain
exploit-express-allocation-of-resources-without-limits-or-throttling
Exploit Proof of Concept for allocation-of-resources-without-limits-or-throttling
1 stars
Explain
payslip-analyzer
A Cloudflare webapp (Nuxt + Hono worker) uses Gemini API to analyze Israeli Payslips
TypeScript1 stars
Explain
vulnwash
0 stars
Explain
contexto-web-extension
Contexto social relationship management for X
TypeScript0 stars
Explain
dotfiles
dotfiles
Python0 stars
Explain
vibecode-learn-english
TypeScript0 stars
Explain
agentforge
0 stars
Explain
fastify-vulnerable-ex1
JavaScript0 stars
Explain
rules-file-backdoor
JavaScript0 stars
Explain
skills
JavaScript0 stars
Explain
coding-agent-security-benchmark
A Claude Agent SDK security benchmark project
TypeScript0 stars
Explain