New GitHub project

Authtics Advisories is a new GitHub project that uses AI to scan malicious packages from package registries. The system, created by user bananakitssu, analyzes packages from PyPI and NPM registries every day. It selects 100 packages from each registry and runs them through a Gemini analysis pipeline. The output is then presented as a GitHub pull request for human review, rather than being automatically classified as a security advisory by the AI model.

The workflow of Authtics Advisories is designed to provide humans with a report of potentially suspicious packages, rather than treating AI analysis as a definitive statement. The system doesn't scan the registries simultaneously, but runs the NPM scan first, followed by the PyPI scan approximately two hours later. This separation allows for better management of the scanning process.

The time it takes for a complete scan can range from 30 minutes to an hour, depending on the number of packages analyzed. Each individual package analysis typically takes between 2 to 60 seconds. Despite the AI's role in initial analysis, it doesn't replace human security researchers. Instead, it serves as a tool to help identify areas worth investigating.

Currently, Authtics Advisories focuses on NPM and PyPI registries, but the developer plans to expand it to include more registries and improve analysis capabilities. The project is still in its early stages, with the initial goal of providing a daily scan of suspicious packages and opening a dialogue between the AI system and human reviewers.