shai-watch

Live malware advisory radar — npm · PyPI · RubyGems · Maven · Composer · Go

/health GHSA docs OSV.dev

—

Advisories last 24h

—

Advisories last 7d

—

Top campaign now

—

Weekly downloads at risk (30d)

Live malware feed

Loading…

Manifest scanner

Paste a package.json, requirements.txt, Gemfile.lock, go.sum, composer.json or package-lock.json — get an instant audit.

Active campaigns

Loading…

Top blast radius

Active malware advisories ranked by weekly download count of the affected package.

Loading…

Real data sources

GitHub Security Advisories type=malware — every 15 min, every ecosystem
OSV.dev /v1/query — every 60 min, top 500 affected packages
npm registry downloads/point/last-week — every 6 h
PyPI Stats recent — every 6 h

Built with Cowork — code on holyai.me —

Loading…