clean baselinePR #1
Clean dependency add: ms@2.1.3
garnet-labs/garnet-runtime-review-demo
A one-line dependency bump installed under the sensor. Recorded egress stays on the npm baseline — registry.npmjs.org and GitHub infrastructure only.
Profile Evidence Catalogue
Real run profiles captured at the kernel level across open-source CI, security tools, AI agents, and replayed supply-chain attacks. Execution receipts, not alerts — cards with a verified public report link straight to it.
Live public reports
Each link below is a logged-out Garnet report from a real recorded CI run. Click through and inspect the process lineage and outbound destinations yourself.
garnet-labs/garnet-runtime-review-demo
A one-line dependency bump installed under the sensor. Recorded egress stays on the npm baseline — registry.npmjs.org and GitHub infrastructure only.
garnet-labs/garnet-runtime-review-demo
The same one-line diff, but the package's postinstall reaches httpbin.org at install time — surfaced in the run record, invisible in the code review.
garnet-labs/garnet-runtime-review-demo
A transitive dependency's postinstall does host recon and beacons to api.ipify.org, ip-api.com, and httpbin.org — none of it visible in the diff.
garnet-labs/garnet-runtime-review-demo
Only package.json changes in the diff; the resolved transitive install still beacons out. The runtime record captures what the lockfile-less diff hides.
garnet-labs/garnet-runtime-review-demo
A Stamphog Review agent job running under the sensor — the reviewer itself gets an execution record: what ran, what it touched, where it connected.
garnet-labs/pnpm
A dependency bump on a fork of pnpm's real CI, recorded end-to-end — process lineage and outbound destinations for an OSS-scale install job.
jadoonf/sha1-hulud-research · npm CI sandbox
An install-time payload reached external chain and storage endpoints during an npm install while CI logs stayed clean.
egress api.mainnet.aptoslabs.com · api.trongrid.io · bsc-dataseed.binance.org · drive.google.com · drive.usercontent.google.com · fullnode.mainnet.aptoslabs.com
jadoonf/sha1-hulud-research · npm CI sandbox
A second SHA1HULUD replay showing npm install-time egress to external destinations under monitoring.
egress pastebin.com · registry.npmjs.org
jadoonf/glassworm-poc · Glassworm PoC — Invisible Unicode Supply Chain Attack
Steganographic Unicode hidden in source executed at install and reached out over the network, invisible to code review.
egress httpbin.org
jadoonf/glassworm-poc · Install from npmjs
The Glassworm package installed straight from the npm registry under monitoring, showing the install-time delivery path.
egress api.ipify.org · cloudflareinsights.vercel.app · github.com · registry.npmjs.org · release-assets.githubusercontent.com
jadoonf/clinejection-poc · Clinejection Stage 3 — Nightly Pivot: cline@2.3.0 Delivery
Final stage of an AI-agent prompt-injection chain: a poisoned cline release is delivered under instrumentation.
egress registry.npmjs.org
jadoonf/clinejection-poc · Clinejection Stage 2 — Cacheract Cache Poisoning
Cache-poisoning stage that spawned an interpreter shell and reached the Actions cache to plant a tainted artifact.
egress blob.bn3prdstrz12a.store.core.windows.net · blob.bn3prdstrz12a.trafficmanager.net · glb-db52c2cf8be544.github.com · productionresultssa19.blob.core.windows · results-receiver.actions.githubusercontent
jadoonf/clinejection-poc · Clinejection Stage 1 — Prompt Injection → Preinstall Exfil
Entry point of the chain: a prompt injection triggers a preinstall script that phones out before any human reviews the change.
egress api.github.com · glb-2a3c35-public-internal.githubapp.com · hosted-compute-watchdog-prod-iad-02.githubapp
pnpm/pnpm · CI
The richest profile in the catalogue: a real pnpm CI run profiled end-to-end, with the full install + test lineage and registry egress visible.
egress blob.bn3prdstrz12a.store.core.windows.net · blob.bn3prdstrz12a.trafficmanager.net · codeload.github.com · github.com · glb-db52c2cf8be544.github.com · nodejs.org
pnpm/pnpm · TS CI
pnpm's TypeScript end-to-end suite, showing a deep multi-tree install/test lineage under monitoring.
egress blob.bn3prdstrz12a.store.core.windows.net · blob.bn3prdstrz12a.trafficmanager.net · blob.bnz49prdstrz09a.store.core.windows · blob.bnz49prdstrz09a.trafficmanager.net · codeload.github.com · dualstack.k.sni.global.fastly.net
umar-sik/posthog · Frontend CI
PostHog's frontend build profiled, with the turbo build system's process tree captured from the runner down to the shell.
egress api.github.com · github.com · glb-db52c2cf8be544.github.com · registry.npmjs.org · release-assets.githubusercontent.com · results-receiver.actions.githubusercontent
garnet-labs/dub · Playwright E2E Tests
Dub's end-to-end Playwright run with its services and browser drivers visible across multiple process trees.
egress 0.gravatar.com · assets.dub.co · avatar.vercel.sh · blob.bn3prdstrz12a.store.core.windows.net · blob.bn3prdstrz12a.trafficmanager.net · d1tcqh4bio8cty.cloudfront.net
4ndersonLin/shopFast · CI
An external user's project profiled organically in its own CI under Garnet monitoring.
egress blob.bn3prdstrz12a.store.core.windows.net · blob.bn3prdstrz12a.trafficmanager.net · glb-db52c2cf8be544.github.com · productionresultssa19.blob.core.windows · registry.npmjs.org · results-receiver.actions.githubusercontent
garnet-labs/axios · Continuous integration
The axios HTTP client's CI profiled, showing its browser-testing lineage under monitoring.
egress azurefd-critical-t-prod-stage2.trafficmanager · glb-db52c2cf8be544.github.com · packages.microsoft.com · part-0012.t-0009.t-msedge.net · pmc-prod-afd-endpoint-evdhh8f8byhsezfp.b01 · registry.npmjs.org
garnet-labs/trivy · Test
Trivy profiled across many process trees, with its build system captured.
egress api.github.com · d2jiepz2fi8hgn.cloudfront.net · github.com · glb-db52c2cf8be544.github.com · golangci-lint.run · mirror.openshift.com
garnet-labs/cosign · CI-Tests
Sigstore's cosign profiled across its test binaries, with credential-file access recorded during signing tests.
egress auth.docker.io · auth.docker.io.cdn.cloudflare.net · gcr.io · glb-db52c2cf8be544.github.com · index.docker.io · ingest.codecov.io
garnet-labs/litellm · LiteLLM Mock Tests (folder - tests/test_litellm)
LiteLLM (compromised in the TeamPCP incident) profiled in its pytest suite under monitoring.
egress dualstack.python.map.fastly.net · files.pythonhosted.org · pypi.org · raw.githubusercontent.com
garnet-labs/reth · lint
The Ethereum Reth client's lint job profiled through its cargo build chain.
egress api.github.com · dualstack.k.sni.global.fastly.net · fastly-static.rust-lang.org · github.com · glb-db52c2cf8be544.github.com · release-assets.githubusercontent.com
garnet-labs/garnet-agentic-harness-poc · Agentic Custom Package Install (Garnet-Monitored)
The deepest agentic profile: many process trees captured while an agent installs a custom package under Garnet's agentic workflow monitoring.
egress api.github.com · api.openai.com · blob.blz25prdstrz09a.store.core.windows · blob.blz25prdstrz09a.trafficmanager.net · chatgpt.com · ghcr.io
garnet-labs/garnet-agentic-harness-poc · Agentic Custom Package Install (Garnet-Monitored, Codex)
OpenAI Codex installing a package under Garnet's agentic workflow monitoring, captured end-to-end.
egress api.github.com · api.openai.com · blob.bn3prdstrz12a.store.core.windows.net · blob.bn3prdstrz12a.trafficmanager.net · chatgpt.com · ghcr.io
garnet-labs/garnet-agentic-harness-poc · Install npm Package with Codex Agent
A baseline of an OpenAI Codex agent installing an npm package, with the codex proxy lineage captured under monitoring.
egress api.github.com · github.com · registry.npmjs.org · release-assets.githubusercontent.com
jadoonf/npm-analysis-feed · Garnet: TanStack Matrix
Systematic profiling of the TanStack package matrix, capturing the runtime behaviour of the analysis run.
egress api.github.com · blob.bn9prdstrz04a.store.core.windows.net · blob.bn9prdstrz04a.trafficmanager.net · git-tanstack.com · glb-db52c2cf8be544.github.com · productionresultssa17.blob.core.windows
garnet-labs/tanstack-router-replay · Bundle Size
A bundle-size benchmark for TanStack Router profiled under monitoring.
egress api.github.com · blob.blz25prdstrz09a.store.core.windows · blob.blz25prdstrz09a.trafficmanager.net · cloud.nx.app · elsa.session.foundation · files.getsession.org
garnet-labs/huggingface_hub · Python tests
The HuggingFace Hub ML client profiled in its Python test suite.
egress dualstack.python.map.fastly.net · files.pythonhosted.org
garnet-labs/n8n · CI: Python
n8n's Python CI profiled with its modern toolchain captured under monitoring.
egress api.github.com · blob.bl5prdstrz24a.store.core.windows.net · blob.bl5prdstrz24a.trafficmanager.net · dualstack.python.map.fastly.net · files.pythonhosted.org · github.com
garnet-labs/linear · build
Linear's build profiled, capturing its Node.js build tree under monitoring.
egress registry.npmjs.org