← Trending

Tangerine Index lists products launched since ChatGPT and people's reactions to them.

CloneGuard

github.com

Scan a repo for credential-stealing tricks before it runs

Open source

Visit github.comexternal siteGitHub18 starsexternal site

In the makers' words

Scan a repo for malware tricks before you run it. Catches credential theft, hidden network calls, obfuscated code and auto-run hooks. Read-only, with no dependencies.

Reactions (2)

Similar products

by description similarity

  1. CLI that spots fake GitHub stars, risky dependencies and licence traps

    CLI that detects fake-star campaigns, dependency hijacks, licence red-flags and other signs of repository risk. Inspired by the “4.5 million fake stars” study, StarGuard helps CTOs, security teams and investors perform fast, automated open-source due-diligence.

    github.comCLIOpen source2 reactionslatest reaction

    Hacker News
    122 pts
    Product Hunt
    No reaction
    GitHub
    502 stars

  2. RepoSecGo

    Know before you clone with instant GitHub security insights

    reposecgo.comlatest reaction

    Hacker News
    No reaction
    Product Hunt
    88 votes
    GitHub
    No reaction

  3. I built a PR listener and ruleset to detect malicious code in CI/CD

    Prevent merging of malicious code in pull requests

    github.comOpen source2 reactionslatest reaction

    Hacker News
    13 pts
    Product Hunt
    No reaction
    GitHub
    258 stars

  4. medusa

    AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an always-on AI attack-signature scanner and native Rust & PHP rules. Also: medusa scan --git to vet any repo, medusa secrets scan for leaked API keys. 40,000+ patterns, zero setup.

    github.comOpen sourcelatest reaction

    Hacker News
    No reaction
    Product Hunt
    No reaction
    GitHub
    1,015 stars

  5. destructive_command_guard

    A fast Rust safety hook that blocks destructive shell, git, and filesystem commands before AI coding agents run them. 50+ security packs (databases, Kubernetes, Docker, cloud, Terraform), heredoc/inline-script scanning, CI scan mode, and explain mode; works with Claude Code, Codex, Gemini, Copilot, Cursor, and more.

    github.comCLIOpen sourcelatest reaction

    Hacker News
    No reaction
    Product Hunt
    No reaction
    GitHub
    6,290 stars