CloneGuard

About

CloneGuard is a command-line tool that scans a project folder for signs of malware before you run or install it. It looks for code that reaches for SSH keys and cloud credentials, connections to suspicious servers, obfuscated code, and hooks that run automatically, such as editor tasks. It only reads files and never executes anything from the scanned project, so a suspicious repo can be checked safely, and exit codes let scripts and git hooks act on the verdict.