typosquat

A tool to monitor for potential spear phishing domains and send to Slack.

Advanced, async typosquatting and domain threat intelligence scanner. Detects lookalike domains, integrates with URLScan, Doppler, and AWS Secrets Manager. Modern reports, Docker-ready, and security-focused.

Convert DNSTwist Results to MDE IOCs and TenantAllowBlockLists

Offline, npm supply-chain auditor — behavioral + baseline-diff detection of malicious install scripts (Shai-Hulud-style worms). No network, no account, no CVE database.

DepScope — Package Intelligence for AI Agents. 22 MCP tools, 19 ecosystems, free, no auth. https://depscope.dev

Record, replay, and diff WebSocket sessions for debugging.

Verify-before-act safety MCP for AI coding agents: check packages, lockfiles, skill/plugin manifests, and CI workflows before installing or merging

Won 🏆 Best Technical Depth Award @ LikeLion Hackathon 2026. Agentic install-time supply-chain security for npm and PyPI. Multi-agent verdicts, local registry proxy, honest Wilson-CI benchmarks.

Typosquat permutation generator — the generate half of the twist/twister pair (pure Go, zero deps)

Guard AI agent dependency installations with intelligent security checks

Scan GitHub repos for trust scoring before you git clone. Detects typosquats, malicious install hooks, obfuscated code, and backdoored dependencies.