Home Discord GitHub Blog

listen.dev Documentation
Getting Started
- Quick start
- Introduction
Listen for GitHub
CONCEPTS
- Threat detection
  - How listen.dev Protects Your CI/CD Pipelines
- Risk coverage
  - CI/CD risks
    Exfiltration (network)
    Tampering (filesystem)
    Malicious child processes
  - Dependency risks
    Install scripts
    Dependency confusion
    Account takeovers
    Static & metadata heuristics
    Suspicious URL strings
    Typosquatting
    Env variable access
    Steneaography
    Copy of Risk coverage
Resources
- Security
- Community
  - Discord
  - GitHub

Powered by GitBook

Suspicious URL strings

Coming soon

Package hijacking via domain / email takeover after expiration.

Last updated 1 month ago

On this page

© 2023 Garnet Labs