56,622 packages matching “indirect-prompt-injection”

@askalf/fieldpass

v0.5.1 · 24 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Governed agentic browser — an indirect-prompt-injection firewall and action gate that wraps a CDP browser so agents can read untrusted web pages safely. Part of the Own Your Stack agent-security suite (redstamp · strongroom · truecopy · cordon).

38Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.5.1 (the latest release), from the OSV.dev database.

rag-poison-guard

v2.0.0 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Sanitize untrusted content to prevent Indirect Prompt Injection (IPI) in RAG pipelines — strips invisible Unicode smuggling (zero-width, bidi, tag characters) and neutralizes injection markers. Zero dependencies, fully typed.

11Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.0.0 (the latest release), from the OSV.dev database.

vuln-mcp-example-indirect-prompt-injection

v1.0.0 · 9 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

A vulnerable MCP server demonstrating indirect prompt injection through document retrieval

1Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.0 (the latest release), from the OSV.dev database.

@sanctum-runtime/sdk

v0.1.2 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Sanctum Runtime SDK — the runtime trust boundary for autonomous systems. Signed action tokens, blast-radius scoring, source-trust classification (indirect-prompt-injection defense), dual-approver + auto-escalate, policy replay, SOC2 + NIST AI RMF evidence

11Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.2 (the latest release), from the OSV.dev database.

@weave_protocol/browser

v0.1.0 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Weave Protocol browser-agent security — enforces WARD.md policies and detects indirect prompt injection (IPI) for Playwright, Puppeteer, and Stagehand-based AI agents

1Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.0 (the latest release), from the OSV.dev database.

@stackone/defender

v0.7.4 · 12 hours ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Prompt injection defense framework for AI tool-calling

4.9KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.7.4 (the latest release), from the OSV.dev database.

di

v0.0.1 · 13 years ago

85
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Dependency Injection for Node.js. Heavily inspired by AngularJS.

3.3MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.0.1 (the latest release), from the OSV.dev database.

tsyringe

v4.10.0 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Lightweight dependency injection container for JavaScript/TypeScript

10.2MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.10.0 (the latest release), from the OSV.dev database.

injection-js

v2.6.1 · 9 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Dependency Injection library for JavaScript and TypeScript

1.4MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.6.1 (the latest release), from the OSV.dev database.

@expo/sudo-prompt

v9.3.2 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Run a command using sudo, prompting the user with an OS dialog if necessary

6.2MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v9.3.2 (the latest release), from the OSV.dev database.

@listr2/prompt-adapter-inquirer

v4.2.5 · 21 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Listr2 prompt adapter for inquirer.

4.7MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.2.5 (the latest release), from the OSV.dev database.

password-prompt

v1.1.3 · 3 years ago

85
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

cross-platform masked or hidden prompt

3.3MDownloads across all versions in the last 7 days, from the official npm downloads API.0BSDLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.1.3 (the latest release), from the OSV.dev database.

typed-inject

v5.0.0 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Type safe dependency injection framework for TypeScript

1.9MDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v5.0.0 (the latest release), from the OSV.dev database.

@vscode/sudo-prompt

v9.3.2 · 7 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Run a command using sudo, prompting the user with an OS dialog if necessary

2.3MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v9.3.2 (the latest release), from the OSV.dev database.

vite-plugin-css-injected-by-js

v5.0.2 · 25 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

A Vite plugin that takes the CSS and adds it to the page through the JS. For those who want a single JS file.

861.9KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v5.0.2 (the latest release), from the OSV.dev database.

@inquirer/confirm

v6.1.1 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Inquirer confirm prompt

47.8MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v6.1.1 (the latest release), from the OSV.dev database.

enquirer

v2.4.1 · 3 years ago

85
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Stylish, intuitive and user-friendly prompt system. Fast and lightweight enough for small projects, powerful and extensible enough for the most advanced use cases.

33.5MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.4.1 (the latest release), from the OSV.dev database.

@loaders.gl/terrain

v4.4.4 · 10 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Framework-independent loader for terrain raster formats

469.7KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.4.4 (the latest release), from the OSV.dev database.

@claude-flow/aidefence

v3.0.3 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

AI Manipulation Defense System (AIMDS) with self-learning, prompt injection detection, and vector search integration

5.3KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.0.3 (the latest release), from the OSV.dev database.

awilix

v13.0.5 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Extremely powerful dependency injection container.

520.8KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v13.0.5 (the latest release), from the OSV.dev database.
1 / 50Next