TLDR Tech / InfoSec
Supply Chain Monitor
Elastic's `supply-chain-monitor` is a tool that monitors PyPI and npm for new package releases by polling their respective changelog feeds. It analyzes up to 15,000 top packages per ecosystem, performing a diff between each new release and its predecessor. The unified diff is then sent to the Cursor Agent CLI for LLM-based classification as malicious or benign, with Slack alerts for positive findings. The tool focuses on detecting obfuscated code, unexpected network calls, persistence writes, credential exfiltration, and typosquatting. It has been validated against real-world incidents such as the Telnyx PyPI compromise and the axios npm supply chain attack.
Read the full story