analyzing-supply-chain-malware-artifacts

What problem does it solve?

This Skill helps security teams identify and characterize trojanized software artifacts, compromised build pipelines, and sideloaded dependencies to understand intrusion vectors and the scope of compromise.

Core Features & Use Cases

• Artifact comparison: Detect trojanized binaries by comparing legitimate and suspect artifacts across the software supply chain.
• Code-signing & integrity checks: Validate signatures and detect signing anomalies in build outputs.
• Detection workflow: Reconstruct infection timelines and scope across affected systems for threat hunting and incident response.

Quick Start

Run the supply-chain malware artifact analysis agent on a target package.json or binary to generate an artifact analysis report.