JSPM

Scrapes the web serial Worm and its sequel Ward into an ebook format

Security scanner that checks npm dependencies for Shai Hulud vulnerable packages. 100% offline, zero data collection, zero telemetry. Scans all dependencies against 689+ known compromised packages.

A security scanner that detects npm packages compromised by supply chain attacks, including the Axios attack (March 2026) and Shai Hulud malware.

Sandbox npm/pnpm/yarn/bun install with bwrap (Linux) or Docker (macOS) to keep secrets in the working directory and host $HOME out of reach of postinstall scripts.

Put tape's TAP output into the DOM, and add html injection method.

an epub reader for the command line

Worm

Open-source, zero-dependency tool that blocks compromised packages BEFORE download. Built to counter supply chain and credential theft attacks like Shai-Hulud.

Find Shai-Hulud worm in lock files

External anchor providers for AgentOS provenance — blockchain, WORM storage, and transparency log integrations

a library to support epub readers such as cli-worm

heart-attack self replicating virus node-js