Security & Supply Chain

Why running npm install is the most dangerous thing you do all day, and how to intercept the threat before it hits your disk.

A Bash-and-Python toolkit that does more than list suspicious packages. It checks install timing, persistence artifacts, and eBPF traces, then folds scattered community findings into one trusted workflow.

A deep dive into a tunneling gateway that pairs VLESS relaying with adaptive flow control, quota-aware pacing, and a dashboard built to deploy anywhere.

A JavaScript MITM tool that rewrites the `/clls/wloc` response, patches protobuf fields, and makes iOS believe its Wi-Fi and cell world is somewhere else.

A tiny Python tool shows how a normal CLI customization hook can become a persistent model-control path.

How a Python harness, strict logic gates, and persistent memory turned Claude Code into an autonomous security researcher.

A single-file Node.js app turns a serverless host into a disguised gateway, a subscription generator, and a remote-monitorable tunnel, all wrapped in the language of a harmless website.

A deep dive into how MetaMask keeps Web3 compatibility, provider injection, and security hardening intact while moving the wallet out of the browser and into a dedicated desktop host.

A Vercel Labs harness that uses fast pattern matching, agentic investigation, and revalidation to turn vulnerability hunting into a disciplined pipeline.

LangGenius’s sandbox trades per-task container startup for a tightly staged lock sequence: seccomp, chroot, privilege dropping, UID tricks, and a strict bootstrap order for Python and Node.js.

An open-source security workspace that blends a real terminal, local-first models, retrieval, memory, and agentic shell access into one workflow for offensive security.

A deep dive into the modular framework bypassing the world's most sophisticated bot detection through TLS impersonation and hardened automation.

A Go-based proof of concept that uses arithmetic coding, local language models, and conversation state to make encrypted messages look like harmless text.

A deep dive into the static browser toolkit that mutates language, hides payloads in Unicode, and reverse-engineers its own tricks.

How a single Go binary acts as a local firewall to stop autonomous coding agents from exfiltrating your secrets.

How a graph-based static analysis engine turns "Privacy by Design" from a legal slogan into a verifiable build step.

A plain-text blocklist turns WordPress’s simplest filter into a privacy-preserving spam trap, using fragments, anchors, and years of manual pattern hunting.

How a collection of Markdown files forces LLMs to adopt eight distinct attacker personas and an adversarial judge to find deep Solidity vulnerabilities.

A security skill built for autonomous agents, with trust tiers, red flags, and review templates that turn fuzzy judgment into a repeatable defense system.

A local-first security toolkit that scans skill files, audits MCP configs, and watches your agent directories for prompt injection, poisoning, and supply-chain tricks.

Google Research's prompt injection defense uses a quarantined LLM, capability tags, and a custom interpreter to keep untrusted inputs from steering privileged actions.

A deceptively simple audit trail that pairs a flexible event model with a two-table context system, modern PHP architecture, and developer-friendly logging hooks.

A local-first tool with AST parsing, cross-file taint tracking, secret detection, and PQC compliance, built to give developers security feedback before they leave the editor.

A deep look at how this repository parses raw packets, tracks state per flow, extracts TLS SNI from encrypted traffic, and keeps every connection pinned to one worker thread.

How a stealth Type-2 hypervisor uses micro-architectural time compensation and private memory boundaries to subsume Windows and evade modern anti-cheats.

A tiny static page turns innocent clicks into hidden behavior. The real story is not the verse, it is the gap between what the page shows and what the code does.

A TypeScript SDK for confidential computing, transparency logs, and hybrid post-quantum signatures. It is built to prove what ran, where it ran, and whether the record was tampered with.

NVIDIA’s community repo packages sandboxes, skills, and bootstrap tooling around a sharper idea of AI safety: constrain the runtime, not the prompt.

How hundreds of hermetic integration tests, bytecode scanning, and a strict Java 8 mandate keep the enterprise build pipeline from collapsing.

An open-source deception framework that uses AI, cloned web skins, and async protocol emulation to turn dead-end probes into long, believable attacker conversations.

A Swift UI, a Python engine, and a vulnerable `gcore` entitlement combine to dump decrypted iOS app memory, patch the Mach-O, and make the runtime state permanent.

An open-source system that clusters noisy prompt scraps, verifies them by consensus, and turns a rumor mill into a real-time ledger.

A versioned constitution for an AI model is not a product release note. It is governance as code, with trade-offs written out in plain language.

A tour of the generator, the dormant-loading pattern, and the SQL safety layer that lets dozens of gems behave like one observability system.

How an experimental kernel module bypasses connection tracking to turn a single server into a shapeshifting network prefix.

As AI coding agents gain ambient authority over our file systems, this lightweight monitor uses kernel-level hooks to track every autonomous intent.

A phase-by-phase workflow for secure setup, identity pivots, image forensics, and link analysis. This project is less a toolchain than a methodology for turning scattered clues into an investigation.

How a specialized ETL pipeline transforms disclosed vulnerabilities into a high-signal Shadow-Brain for AI security agents.

How a lightweight Xposed module and a Python script exposed a silent data exfiltration ring hiding inside a popular open-source Telegram fork.

A client-side, Canvas-powered defense that keeps images local and turns plain HTML into a privacy tool.

A cheatsheet that does more than compare tools. It rewires how operators think about authentication, remote execution, Kerberos, SMB, and AD workflows across modern async tooling.

A Cobalt Strike extension that runs compressed ML models on the target, turning file triage into native Windows inference instead of grep-based guesswork.

A Ruby on Rails recon engine that tracks developer activity, catches stray public repos, and runs Gitleaks inside Docker to keep scans isolated, throttled, and production-safe.

A single-file middleware layer signs requests, freezes the model and prompt server-side, and turns image uploads into temporary URLs. It is less a proxy than a programmable security fence for AI apps.

How a boutique collection of Nuclei scripts uses metadata forensics and Base64 decoding to hunt zero-day vulnerabilities without firing a single exploit.

How a specification-as-code repository is building the enterprise security mesh for the agentic era by solving the AI login problem.

A cartographic encyclopedia that turns abstract threat modeling into something you can explore, remember, and compare.

A blueprint for bringing proprietary data into ChatGPT without flattening the enterprise security model.