malcontent

Chainguard's supply-chain malware detector that analyzes programs, source files, container images and archives, flagging suspicious capabilities such as code execution, evasion, network exfiltration and credential access. Compares versions of a package to surface newly introduced malicious behavior, making it useful for catching compromised dependencies before they ship.