NPMScan

Malicious NPM package detection and security scanner

NPMScan is a threat intelligence platform for the npm ecosystem. It performs static analysis of npm packages and package.json/lockfile contents to flag malware-like behavior such as crypto-drainers, obfuscated code, suspicious install scripts, and credential exfiltration, and maintains a searchable feed of known npm vulnerabilities and security advisories. It offers a browser-based scan without login or API keys, a public MCP server for AI agents, and a GitHub Action for scanning dependency changes in pull requests.

Category: Security
Pricing: free
Free tier: yes
API: yes
MCP server: yes
SDK: no
Open source: unknown

#npm #supply-chain-security #malware-detection #vulnerability-database #mcp-server #github-action #dependency-scanning

Alternatives to NPMScan →

Listed 2026-10-29 · last verified 2026-10-29 · extracted by @cf/zai-org/glm-5.3-flash · confidence 0.9

Your product? Claim this listing · Report a problem · Badge

API

curl https://toolgrep.com/api/products/npmscan