Stop malicious packages at the registry level, before they reach a single user. Built for registry operators and teams that run their own package infrastructure.
Client Testimonials
Yeeth Security helped us enhance the security framework of the Open VSX Registry. Their work introduced pre-publish checks, quarantine workflows, and threat-informed detection mechanisms that significantly strengthen the platform's security while keeping the publishing process straightforward for extension publishers.
Products
Tools that stop malicious packages before they reach a single developer.
Registries are a high-value target. A single malicious package can reach thousands of developers before anyone notices. Argus plugs into your publish pipeline and runs every submission through a multi-stage analysis before it goes live.
A backdoor published under an account impersonating a well-known open source developer. The extension collected host telemetry and executed arbitrary code received from a remote C2 server. Caught pre-publish. Zero users affected.
Read the ReportSurfaces Argus risk scores directly in your editor. See threat verdicts on installed packages without leaving your IDE — no extra tooling, no context switching.
Supply chain security hooks for Claude Code. Intercepts npm, pip, yarn, pnpm, and cargo install commands before they execute, and checks each package for age, typosquat, and install-script risk signals.
Latest Briefings
Research and analysis from the Yeeth Security team.
Malware Analysis
Argus caught a variation of the GLASSWORM campaign and flagged seven malicious extension names. We uncover what the TinyGo-compiled WebAs...
Read Briefing
Threat Intel
A notebook productivity tool turns into a full remote access implant whose architecture overlaps with two documented DPRK campaigns — Con...
Read Briefing
Malware Analysis
A new wave on Open VSX, a two-tier Solana dead-drop, and a Go-based backdoor.
Read Briefing
Security Research
Yeeth Security has been added to the Open VSX Security Hall of Fame as a security guardian. A look at the work that led here, and what it...
Read Briefing
Security Research
What developer-environment threats look like in 2026, and the controls security leaders should put in place. Written by Yeeth Security fr...
Read Briefing
Threat Intel
Sixteen extensions in 48 hours. All share one author. A forensic walkthrough of how Bane, Yeeth Security's threat-intelligence knowledge ...
Read BriefingGet Started
Schedule a consultation with our security experts to discuss how we can help protect your organization.
Book a Call