---
title: "Discussion on \"Stop Supply Chain Attacks: GuardDog Scans Your Dependencies for Hidden Malware\" | Hashnode"
description: "Discussion on \"Stop Supply Chain Attacks: GuardDog Scans Your Dependencies for Hidden Malware\". 📝 Quick Summary:\nGuardDog is a command-line interface tool designed to detect malicious packages across various ecosystems including PyPI, npm, Go, GitHub Actions, and VSCode extensions. It employs both source code analysis using Semgrep rules and p..."
url: "https://hashnode.com/posts/stop-supply-chain-attacks-guarddog-scans-your-dependencies-for-hidden-malware/6941603e7d1af2ff68ad9ba3"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Stop Supply Chain Attacks: GuardDog Scans Your Dependencies for Hidden Malware](https://github-open-source.hashnode.dev/stop-supply-chain-attacks-guarddog-scans-your-dependencies-for-hidden-malware?utm_source=hashnode&utm_medium=feed)

📝 Quick Summary: GuardDog is a command-line interface tool designed to detect malicious packages across various ecosystems including PyPI, npm, Go, GitHub Actions, and VSCode extensions. It employs both source code analysis using Semgrep rules and p...

Dec 16, 2025 · 3 min read · github-open-source.hashnode.dev  
Read the article

-   [#package-security](https://hashnode.com/tag/package-security)
-   [#software-supply-chain-security](https://hashnode.com/tag/software-supply-chain-security)
-   [#cli-tool](https://hashnode.com/tag/cli-tool)
-   [#semgrep](https://hashnode.com/tag/semgrep)
-   [#open-source](https://hashnode.com/tag/open-source)

## Written by

[GitHubOpenSource](https://hashnode.com/@GitHubOpenSource)

@GitHubOpenSource

  
[View profile](https://hashnode.com/@GitHubOpenSource)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.