
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
content-guard
Advanced tools
🛡️ Advanced content analysis and moderation system with multi-variant optimization. Features context-aware detection, harassment prevention, and ML-powered toxicity analysis. Pre-1.0 development version.
Professional content moderation and spam detection for modern applications.
ContentGuard analyzes text for spam, harassment and malicious patterns. It combines a powerful rule engine with optional machine‑learning plugins to deliver fast and accurate results across many languages.
npm install content-guard
const { ContentGuard } = require('content-guard');
const guard = new ContentGuard('moderate');
const result = await guard.analyze('Hello world');
console.log(result.isSpam);
ContentGuard v4.5 ships four tuned variants so you can balance speed and accuracy:
| Variant | Accuracy | Avg time | Use case |
|---|---|---|---|
| v4.5-turbo | ~91% | 0.02ms | Real‑time chat and high‑volume streams |
| v4.5-fast | ~91.5% | 0.06ms | API gateways and microservices |
| v4.5-balanced | ~93% | 0.25ms | General production deployments (default) |
| v4.5-large | ~94% | 1.32ms | Enterprise and critical moderation |
Select a variant when creating an instance or via the CLI.
ContentGuard includes a modular plugin system. Enable only what you need:
| Plugin | Description & typical use case |
|---|---|
| Obscenity | Detects offensive language. Use for community guidelines. |
| Sentiment | Scores tone of text. Great for chat analytics. |
| Harassment | Flags bullying or hateful phrases. Essential for social apps. |
| Social Engineering | Finds phishing or scam attempts. Useful for email filters. |
| Keyboard Spam | Identifies random key mashing. Perfect for form submissions. |
| Emoji Sentiment | Interprets emoji tone. Adds nuance to sentiment analysis. |
| Cross‑Cultural | Checks for culturally sensitive terms. Global deployments. |
| ML Toxicity | Machine‑learning based toxicity scoring. Higher accuracy. |
| Confusables | Normalizes look‑alike Unicode characters. Prevents obfuscation. |
npx content-guard "Some text" --preset strict --variant fast
See the examples/ folder for integration samples.
Each preset can be customized. Review lib/presets and adjust plugin weights, thresholds and preprocessing options to match your needs.
ContentGuard is released under the MIT License.
FAQs
🛡️ Advanced content analysis and moderation system with multi-variant optimization. Features context-aware detection, harassment prevention, and ML-powered toxicity analysis. Pre-1.0 development version.
We found that content-guard demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.