Tether1

Tether finds the parts of your code a stranger could take over. In 2024, someone bought the polyfill.io domain and turned its script into malware that ran on more than 380,000 websites, and none of those sites changed a line of their own code. Every codebase depends on things it doesn't own, like domains, CDNs, cloud storage buckets and GitHub Actions. When one of them lapses or changes hands, anyone can claim it. You paste in a GitHub repo or a website, and Tether checks it in five stages. Code first pulls out every outside reference. Muse Spark then works out where each one runs, and a Muse Spark agent investigates the ones that look suspicious. Muse Spark explains each risk, and code checks those explanations against the evidence before anything is reported. Every finding lands in Fix Today, Review, or Checked and Safe, with the file, line and fix. When we scanned Kickoff, a real GitHub repo, Tether flagged its polyfill.io script as Fix Today. Everything shown was built during the hackathon.