GuardPack: npm Dependency Sentinel
Developers struggle with malicious post‑install scripts that exfiltrate environment data and break essential packages when disabling scripts. GuardPack scans and sandbox‑runs npm dependencies, flags risky scripts, and delivers a verified, script‑free install path for secure, reliable builds.
Quantitative Score Breakdown
Evidence Signal (1)
Raw PostsThe axios postinstall RAT stole env vars and ~/.aws credentials. --ignore-scripts breaks sqlite3 and bcrypt. Here's a third option.
The axios postinstall RAT stole env vars and ~/.aws credentials. --ignore-scripts breaks sqlite3 and bcrypt. Here's a third option.