https://github.com/ossillate-inc/packj https://github.com/ossillate-inc/packj analyzes Python/NPM packages for risky code and metadata attributes. Uses static c

https://github.com/ossillate-inc/packj https://github.com/ossillate-inc/packj analyzes Python/NPM packages for risky code and metadata attributes. Uses static code analysis. We found a bunch of malicious packages on PyPI using the tool, which have now been taken down: examples https://packj.dev/malware https://packj.dev/malware [disclosure: I’m one of the developers]