PackGuard
Block AI config leaks before npm publish fires
What is PackGuard?
428 npm packages already contain AI assistant dotfiles. 33 exposed live keys. PackGuard hooks into prepublishOnly, opens your tarball before it ships, and blocksclaude/,cursor/, source maps with embedded source, and high-entropy secrets. Refuses to publish until it's clean. Free for solo OSS.
Screenshots
?
No comments yet. Be the first!
Real conversations about PackGuard on X
Post on X