Published August 12, 2026
| Version v0.1.0
Software
Open
chainwatch
Authors/Creators
Description
LLM-assisted supply chain diff analyzer for detecting malicious npm/PyPI package updates. Combines semantic diff analysis (Claude) with threat intelligence feeds (OSV, Rekor/Sigstore, OpenSSF Scorecard, and a new-dependency provenance heuristic) and a ground-truth corpus of real, independently-sourced-and-verified malicious package incidents.
Notes
If you use this software or its accompanying ground-truth corpus, please cite it as below.
Files
erxxc/chainwatch-v0.1.0.zip
Files
(538.7 kB)
| Name | Size | Download all |
|---|---|---|
|
md5:c70454cabcff5acd000daf2cefebb111
|
538.7 kB | Preview Download |
Additional details
Related works
- Is supplement to
- Software: https://github.com/erxxc/chainwatch/tree/v0.1.0 (URL)
Software
- Repository URL
- https://github.com/erxxc/chainwatch