Quick and dirty scanner for shai hulud 2.O.
Source of vulnerable packages: https://github.com/tenable/shai-hulud-second-coming-affected-packages/blob/main/list.json
Usage:
❯ python check_vulnerabilities.py ~/dev/
Loading vulnerable packages from: vulnerable_packages.json
Loaded 802 vulnerable package definitions
Searching for package-lock.json files in: ~/dev/
Found 2 package-lock.json file(s)
✅ CLEAN: ~/dev/ok-example/package-lock.json
🔴 VULNERABLE: ~/dev/vulnerable-example/package-lock.json
⚠️ @ahmedhfarag/ngx-perfect-scrollbar@20.0.20
⚠️ @art-ws/config-eslint@2.0.5
⚠️ @art-ws/config-ts@2.0.8