Directory

Showing 1–1, most evidence first; contradicted and not yet assessed last · names and descriptions as their source publishes them

• Lazarettolazaretto.devSupply chain security scan of an npm or PyPI package, GitHub repo, raw URL, ClawHub skill or MCP server. Use it when an agent is about to install, clone or connect to something. Matches the target against OSV and OpenSSF advisories to catch known malware, then behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection, install-time droppers and tool poisoning. Returns a verdict, file-and-line evidence, a SHA-256 and a signed attestation. An errored scan is free.Livechecked 13 Nov 2026, 21:32 UTCEvidence 1/4x402x402 Bazaar4 payers