Back to article

Open Source Vulnerabilities (opens in new tab) 17 articles covering this post

osv.dev··Open original

Covered in 17 articles

Linux Kernel CVEs Don't Care About Your Distro's Release Schedule — Here's What Actually Happens

DASH 2026 Security & Compliance: Guide to Datadog’s newest announcements

datadoghq.com·

From single pull requests to full software packages: Detecting malicious code at scale

datadoghq.com·

As AI speeds coding, CVE Lite CLI keeps security deliberately AI-free

infoworld.com·

PyCon US 2026 Packaging Summit Recap

bernat.tech··Hacker News

Vulnerability and malware checks in uv

astral.sh··Lobsters, Hacker News, Hacker News

NVIDIA/SkillSpector: Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks.

github.com··Hacker News

analysis-tools-dev/static-analysis: ⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

github.com··Hacker News

NoCoderRandom/sunsetscan: Local-network security auditing with EOL, CVE, device identity, and HTML reports

github.com··r/homelab, r/linux

KoblerS/np-audit: Static security analysis for npm packages. Detects obfuscated code, malicious patterns, and known vulnerabilities before installation.

github.com··r/javascript

SeekYou: How I Built a Unified Host Intelligence Tool That Runs Free on Cloudflare Workers

github.com··DEV

OWASP/cve-lite-cli: Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

github.com··DEV, Hacker News, r/javascript

A03 Software Supply Chain Failures

block malicious NPM/pip installs locally

computer.police.dev··Hacker News

OWASP Adopts CVE Lite CLI to Boost Dependency Scanning

Xz, two years on: what scanners still cannot catch

arcis-website.pages.dev··Hacker News

As AI speeds coding, CVE Lite CLI keeps security deliberately AI-free

csoonline.com··r/javascript