tsParticles poison & venom palette

Operational primitives for act apps and act-independent receivers — idempotency, retry budgets, poison-message classifiers

Pick your poison(icon)

A bountyful amount of algorithms to pick from, choose your poison.

Remedy, poison: choose

Figfont "small--poison" for be imported as a JS module

Poison your content against generative AI personas non gratas.

A Redis Streams event broker for TypeScript: at-least-once delivery, dead-lettering, poison handling, partitioned ordering, a batching publisher, and a consumer runtime.

Figfont "poison" for be imported as a JS module

poison CLI

CTF lab bot for GitHub issue-title prompt injection training.

Somebody's poisoned the watering hole

Sanitize untrusted content to prevent Indirect Prompt Injection (IPI) in RAG pipelines — strips invisible Unicode smuggling (zero-width, bidi, tag characters) and neutralizes injection markers. Zero dependencies, fully typed.

Deterministic prompt-injection / poison / tool-poisoning firewall for LLM agents — multilingual, evasion-resistant, zero black-box ML in the hot path. OWASP LLM01 / MITRE ATLAS.

A resilience shield for Module Federation: typed errors, access policies, timeouts, SRI, CSS-poison guard and React boundaries

Layered, local, vector-backed context compressor for pi — supersede/collapse/cluster compaction with deduped inline recall.

Another poison app

Throw when a user attempts to access specified properties in an object

celery written in nodejs

Adds a `noRobots` shortcode that generates a block of text that's hidden visually and from screen readers, in an attempt to poison the well for large-language model scrapers.