Supply-chain repo/dependency pattern scanner + optional ClamAV integration
rs-guard is a small CLI that (1) scans project directories for
dependency names matching a curated blocklist of known-malicious/typosquat
packages, plus regex checks for suspicious script patterns (curl|bash
pipelines, PowerShell -EncodedCommand, base64-decode-then-eval,
etc.), and (2) optionally delegates to ClamAV
(clamdscan/clamscan) if it's already installed on
your machine, for a real file/EXE scan.
This does not replace your antivirus. It runs alongside whatever you already use — the dependency/pattern blocklist here is a static, manually curated snapshot (not a live-updated threat feed), and the ClamAV integration is a thin wrapper, not a bundled engine.
This page is the public introduction and download point. Team members can run scans through the browser (no local install needed) after logging in at easy-web.tokyo:
https://easy-web.tokyo/RS-Guard →install.sh
Windowsinstall.ps1
Android is not supported yet (requires a separate Kotlin/Java toolchain, planned for a future iteration).
rs-guard scan-repos /path/to/your/repos # dependency-name + suspicious-script scan rs-guard scan-file /path/to/file-or-dir # delegates to ClamAV if installed rs-guard doctor # check ClamAV availability