MUADDIB Scanner

Version updated for https://github.com/DNSZLSK/muad-dib to version v2.11.170.

  • This action is used across all versions by 1 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

MUAD’DIB is a free supply-chain scanner for npm and PyPI that detects known malicious packages, install-time RCE, credential-then-exfiltration flows, obfuscated payloads, binary droppers, and other suspicious behavioral patterns. It combines parallel scanning, deobfuscation, inter-module analysis, compound scoring, and a sandbox environment to provide comprehensive detection capabilities without telemetry.

What’s Changed

Track R malice floor extended for stealth-exec + obfuscation compound. asyncapi/specs recovered from score 4 to 20. DFPR=0, GT identical.