Dependency Combobulator

Dependency Confusion Security Testing Tool

DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.

A tool to investigate Dependency Confusion in Artifactory

## Auto-archived due to inactivity. ## Yorkshire is your friend, yorkshire checks Python's requirements files for a possible dependency confusion.

Find NPM packages in URLs and determine if they can be hijacked

tool for checking potential dependency confusion

Python-based tool for identifying potential dependency confusion vulnerabilities in JavaScript (`package.json`) and Python (`requirements.txt`) projects

npm PoC packages

Simple bash dependency confusion checker (npm, python and ruby)

High-performance Go tool for detecting Dependency Confusion vulnerabilities by scanning JavaScript files and checking unclaimed packages on npm registry.

Demonstration of Dependency Confusion applied to .NET and NuGet

Project to handle requests from malicious PoC of Dependency Confusion or Similar Name packages. Also can be used to generate those packages (gem, npm, pip).

DependencyConfusion is tool used for finding any library used by the project that might be vulnerable to dependency confusion attack.

Compilation of articles and utils about Software Supply Chain Security

Identify potential dependency confusion risks by scanning package.json files

Explore resources on software supply chain security, including articles and tools for detecting dependency confusion and malicious packages. 🛠️📦

automatic tool for finding dependency confusion vulnerabilities

A Tool to check dependency confusion vulnerability

This package implements a test for Dependency Confusion using pip.