After the litellm supply chain attack, I noticed every remediation tool has the same problem: they're Python, and the malware persists via .pth files that auto-run on Python startup.
Run pip-audit on an infected machine? The .pth fires first. Run safety? Same. Run the community detection scripts? Same. Your scanner triggers the malware before it even starts scanning.
The safe script uses bash + find/grep/mv to quarantine .pth files, then python -S (which skips site.py and all .pth processing). We also wrote a safe .pth parser that processes path entries for namespace packages but blocks all import lines (the attack vector at CPython site.py line 213).
Other features:
- ghostgap cure — removes backdoor + rotates all credentials (SSH, AWS, GCP, Azure, K8s, Git, Docker, HuggingFace, Terraform)
- Scans requirements.txt, package.json, Gemfile, Cargo.toml, go.mod, pom.xml, Dockerfile
- 23 known compromised packages across 8 ecosystems
- ghostgap protect — hooks into every pip install automatically
- Zero dependencies (stdlib only)
- GitHub Action included
Zero false positives tested against 67 manifest files across a real production codebase.
zabeerbro•1h ago
Run pip-audit on an infected machine? The .pth fires first. Run safety? Same. Run the community detection scripts? Same. Your scanner triggers the malware before it even starts scanning.
ghostgap solves this with two entry points:
The safe script uses bash + find/grep/mv to quarantine .pth files, then python -S (which skips site.py and all .pth processing). We also wrote a safe .pth parser that processes path entries for namespace packages but blocks all import lines (the attack vector at CPython site.py line 213).Other features: - ghostgap cure — removes backdoor + rotates all credentials (SSH, AWS, GCP, Azure, K8s, Git, Docker, HuggingFace, Terraform) - Scans requirements.txt, package.json, Gemfile, Cargo.toml, go.mod, pom.xml, Dockerfile - 23 known compromised packages across 8 ecosystems - ghostgap protect — hooks into every pip install automatically - Zero dependencies (stdlib only) - GitHub Action included
Zero false positives tested against 67 manifest files across a real production codebase.
GitHub: https://github.com/Vezran/ghostgap PyPI: https://pypi.org/project/ghostgap/