Skip to content

Instantly share code, notes, and snippets.

View sanstream's full-sized avatar
💭
I may be slow to respond.

Sanne Peters sanstream

💭
I may be slow to respond.
View GitHub Profile
@sanstream
sanstream / scan-for-packages.js
Created December 19, 2025 12:47
Sha1-hulud 2.0 detection script
#!/usr/bin/env node
const fs = require("fs");
const path = require("path");
const watchList = [
"02-echo",
"@accordproject/concerto-analysis",
"@accordproject/concerto-linter",
"@accordproject/concerto-linter-default-ruleset",
@sanstream
sanstream / npm.sh
Created November 24, 2025 15:41 — forked from timseverien/npm.sh
Scripts to check whether npm/yarn projects include one of the packages from https://socket.dev/blog/shai-hulud-strikes-again-v2
npm ls --all $(curl https://gist.githubusercontent.com/timseverien/db90f41473a4c3cef3487569f298f4e7/raw/22de534a60253a90437c0fdc30b5497364f158e2/packages.json | jq -r '.|join(" ")')
{
"env": {
"node": true,
"browser": true,
"jest": true,
"es6": true
},
"globals": {
"fixture": false,
"document": "readonly",
h1 {
color: $brand-support-colour;
}
$brand-main-colour: red;
$brand-support-colour: blue;