Standard EICAR test string

Similar to the EICAR anti-virus simulator file. Use it to test your defenses. This package makes an outbound call to www.stepsecurity.io as part of the pre-install step.

Print or write the EICAR antivirus test string using Node.js

A dummy package containing the EICAR test string to test antivirus detections.

EICAR-style detection test sample. Source contains many malware-like static patterns but the runtime is inert (proof-of-execution only). For evaluating scanner detection coverage. See README.

EICAR-style firewall/scan test package (SAFE, non-malicious). For validating Sonatype IQ/Firewall publish+scan workflow in a private repo.

A simple test package that returns the `Hello world` string once you install it.

Eicar

Pure javascript module for calculating ssdeep compatible context triggered piecewise hashes.

VSI bindings for Node.js

Benchmark package for testing SCA and repository firewall behavior. v1.0.0 is safe and prints "Hello World".

Similar to the EICAR anti-virus simulator file. Use it to test your defenses. This package makes an outbound call to www.stepsecurity.io as part of the pre-install step.

A Test package that just contains the EICAR A-V Test string, has no function whatsoever and shouldn't be installed by anyone

A package which has a reported vulnerabilty for 1.0.0, resolved in 1.1.0. Purely for testing continuous integration scripts which detect vulnerabilities. Similar to the EICAR concept for anti virus

No description provided.

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data

a network only clamd client

ClamD Simulator

Mock utilities for unit-testing applications that use pompelmi — Jest, Vitest, and Node test runner

Security audit for AI agents. Finds code, dependency, exposure, secrets, and active-compromise gaps across any stack, with drift detection and SBOM.