⬢github Rust · 25 ★ +4 since we first saw it · pushed 11 d ago · Apache-2.0

usestrix/firewall

Strix Supply Chain Firewall

Strix Firewall is a Rust tool that blocks malicious packages before installation. It checks package names and versions against Strix's blocklist (plus OSSF and OSV data) during downloads, either machine-wide via a system extension or per-command with a `firewall <package-manager>` prefix. It supports npm, PyPI, crates.io, Go, and RubyGems, and holds back brand-new versions by default.

Why now: It was open-sourced in response to the recent LiteLLM backdoor incident, tapping into ongoing concern about software supply-chain attacks.

Who it is for: Developers and security-conscious teams who want automatic protection against malicious npm, PyPI, cargo, Go, or RubyGems packages.

securitysupply-chainrustpackage-manageropen-source

Open on GitHub →

Stars over our 350 snapshots: 21 to 25, since 4 d ago.

Where people talked about it

• Yhn After LiteLLM's backdoor, we open-sourced an OS-level package firewall 4 d ago

API: https://socialmediatrends-api.osmike.com/v1/repos/usestrix/firewall