PIX REGISTRY
typosquat-check
typosquat-check v1.0.0
Typosquat and malicious-package detection across installed dependencies (or a single prospective addition) — cross-checks AI-malware family intelligence, package-name similarity to known popular packages, low maintainer-health signals. Use when auditing a freshly-onboarded repo, vetting a single suspicious package, gating CI on supply-chain risk, or investigating an incident.
Skill by vulnetix, published 2026-10-07. License Apache-2.0. Schema pix.skill/v1.
Tags: pix, vulnetix, official, security