Stars and mentions
Last 30 days, Oct 5 – Nov 3
Package downloads
Cumulative recorded downloads · since 2026-04-08
Across 5 known packages in repositories blacklanternsecurity owns. Cumulative totals include recorded downloads before the selected range. Missing observations leave gaps; totals may be incomplete. PyPI excludes known mirrors.
Top repositories
blacklanternsecurity’s repositories ranked by pull request authors, as on trending.
Contributes to
Repositories outside blacklanternsecurity’s account where blacklanternsecurity opened or reviewed pull requests in the past 365 days.
Who noticed blacklanternsecurity
Everyone who starred or forked blacklanternsecurity’s repositories since the archive began in 2011.
Notable accounts
Ordered by the stars their own repositories have received.
Biggest fans
Accounts that starred the most of these repositories.
Breakout weeks
Each repository’s best week of new stars, with the release published around it.
- Gold
- 01st place finishes
- Silver
- 02nd place finishes
- Bronze
- 03rd place finishes
- Awarded repositories
- 0Owned by blacklanternsecurity now
No trending awards yet
None of the repositories blacklanternsecurity owns has finished in the top three of a completed trending day or week, by stars, forks or PR authors. See who is trending now.
A repository earns an award for finishing first, second or third in a completed trending day or week, ranked by new stars, new forks or pull request authors. Awards follow a repository through renames and transfers and count toward its current owner. Weeks run Monday to Sunday, UTC.
Mentions
cvENGINE: the most advanced external attack surface assessment you can get for free. hevnsnt/CVEngine It exists because of Black October. I wanted a self-hosted tool, built from the best open source tools there are, that answers one question: of all the vulns released every 30 minutes, do I have any of this exposed? Point it at a domain. cvENGINE auto-discovers every subdomain, IP, and open port, fingerprints every service, and matches what it finds against today’s exploited CVEs. Then an AI reproduces what it can with read-only checks and tells you which CVEs can actually hit you. One Docker Compose stack. Open source (GPL-3.0). Self-hosted. Bring your own AI keys, or run a local model. No license fee, no per-asset pricing, and nothing is sent to me. Under the hood: Discovery and scanning - bbot (Black Lantern Security): blacklanternsecurity/bbot - Nuclei and its templates (ProjectDiscovery): projectdiscovery/nuclei - naabu (ProjectDiscovery): projectdiscovery/naabu - nmap: nmap.org - WPScan: wpscan.com - node2shell scanner (Assetnote): assetnote/node2shell-scanner - MailFail (Black Hills Information Security): ACK-J/MailFail Exploitation intelligence behind the fire, smoke, and ice ratings - cve.now: cve.now - CISA KEV: cisa.gov - VulnCheck KEV: vulncheck.com - EPSS (FIRST): first.org - Exploit-DB: gitlab.com - Metasploit: rapid7/metasploit-framework Thank you to every maintainer who builds in the open. None of this exists without you.
🚨PHP2Shell (CVE-2026-109618 / CVE-2026-109619) is being exploited in the wild. Critical RCEs in #PHP core, PHP 5.4 through 8.5.11. Patch to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. BLS Nuclei templates to help you find what's exposed: blacklanternsecurity/PoCs