Hit our first milestone today — Shai-Hulud 2.0 Detector just crossed 100 ⭐ on GitHub! What started as a small effort to help teams detect Shai-Hulud-style supply chain abuse is now getting real traction from the community.
Onwards and upwords !
GenSecAI
@GensecAI
An open source community using generative AI to build open-source tools to secure our digital future from emerging AI. Join us .
Joined June 2025
- CVE-2025-55182 Scanner Released : react2shell-guard - Free, open-source scanner for the critical React Server Components RCE vulnerability (CVSS10.0) ✅ Scan lockfiles, Docker images, live URLs ✅ GitHub Actions + Vercel integration
- Shai-Hulud 2.0 Detector v2.0.0 released. What's new: • SHA256 hash matching (Datadog IOC database) • on:discussion workflow trigger detection • .dev-env/ runner installation scanning • actionsSecrets.json exfil detection GitHub Action →
- ShadowGate is now open source. Stealth redirector + deception gateway written in Go.
- Shai-Hulud 2.0 Detector started as a response to a massive npm supply chain attack. Now it's a community-powered security tool with contributions from devs worldwide. Scan your repos. Protect your secrets. Stay safe. Free. Open source. One YAML line.
