ESLint plugin to detect and stop Trojan Source attacks

Detect trojan source attacks that employ unicode bidi attacks to inject malicious code

Official Tiptap extension for PromptShield - Protect your editor from Prompt Injection and Trojan Source attacks in real-time.

Scan Git repositories for Unicode characters used in Trojan Source attacks.

Scans AI-generated code for invisible Unicode, Trojan Source, and supply-chain threats.

ESLint plugin flagging dangerous Unicode characters (Trojan Source, homograph attacks) and typographic tells of unedited AI-generated code (em dashes, curly quotes, ellipsis, non-breaking spaces)

See what the machine sees. Finds and decodes the text hiding in a file: invisible Unicode, ASCII smuggling, Trojan Source, homoglyphs, styled-out prompt injection, and per-recipient watermarks. Browser, CLI and CI. Zero dependencies.

Detect and sanitize dangerous Unicode in user-supplied text: bidi spoofing (Trojan Source), invisible characters, and Unicode Tag prompt-injection payloads, without breaking real RTL text or emoji.

trojan source demo npm package from Smartpeg cyber security lab

Security kernel for web apps — XSS, Unicode Trojan Source, CSP, PII, clickjacking, rate-limit, MIME-sniff defenses. Framework-agnostic. Pure TypeScript, zero runtime deps.

Find & remove invisible, dangerous, and confusable characters hiding in your text — zero-width spaces, BOMs, bidi 'Trojan Source' controls, Unicode tag prompt-injection, homoglyphs, smart quotes & NBSP. Zero dependencies, runs locally.

Pre-clone static security scanner for GitHub repositories and local codebases. Detects malicious lifecycle scripts, credential theft, obfuscated payloads, trojan source, typosquatting, data exfiltration, and lockfile integrity issues.

Blazing fast native passive security scanner for Web applications

The heart of the PromptShield ecosystem. A zero-dependency, isomorphic TypeScript engine for detecting invisible characters, BIDI overrides, and homoglyph attacks in AI prompts.

Local CLI that scans repos for hidden prompt injections targeting AI coding agents, before your agent reads them.

High-performance VPN engine for React Native powered by Xray-core, with an optional olcrtc WebRTC side-channel for censorship bypass. Built on Nitro Modules.

remove invisible unicode characters

TUI for managing sing-box on macOS and Linux.

acl4ssr

JavaScript AST XRay analysis