Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel/WHM unauthenticated session-forgery vulnerability disclosed 2026-04-28. Defense-in-depth active mitigation shim, ModSec rule pack, remote probe, on-host IOC scanner, and per-tier RE snapshot collector. GPL v2.

A fast and comprehensive tool to check IoC against Theat Intels on the internet

Supply-chain attack scanner for the agent era. Triage in 30s with `npx patient-zero`, block malicious installs before postinstall runs, or drop into CI as a GitHub Action. Covers npm + Python + MCP agent configs. Free, MIT, no signup, no telemetry.

Host-based threat hunting tool that scans for IOCs using keyword/signature matching and behavioral/heuristic analysis

Detect CVE-2025-54313 eslint-config-prettier supply chain attack IOCs on Windows

Proactive threat hunting framework with MITRE ATT&CK mapping - hunts processes, network, files, and logs

Fast Go scanner for supply-chain compromise exposure across npm, PyPI, lockfiles, dependencies, and host IOCs. Built for incident response triage.

Read-only PowerShell scanner for the DAEMON Tools supply chain attack disclosed by Kaspersky on 2026-05-06.