An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

npmjs.org "vulnerability" keyword

levitate 0.1.0
Levitate is an exploit development platform
1 version - Latest release: about 13 years ago - 1 dependent package - 1 dependent repositories - 12 downloads last month - 7 stars on GitHub - 1 maintainer
@4da/mcp-server 6.2.6
Upgrade intelligence for AI coding agents: what changes between your installed and target version...
32 versions - Latest release: about 8 hours ago - 2.65 thousand downloads last month - 0 stars on GitHub - 1 maintainer
pi-security-analysis 0.17.3
Deep vulnerability scanning of your own code, run entirely inside your Pi session at a chosen eff...
5 versions - Latest release: 27 days ago - 501 downloads last month - 0 stars on GitHub - 1 maintainer
foxguard 0.14.1
A security scanner as fast as a linter, written in Rust. 200+ built-in rules across 12 source lan...
25 versions - Latest release: 12 days ago - 1.99 thousand downloads last month - 305 stars on GitHub - 1 maintainer
penthera 2.1.0 💰
Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, imp...
18 versions - Latest release: 1 day ago - 2.12 thousand downloads last month - 71 stars on GitHub - 1 maintainer
cve-scanner 0.3.8
[![NPM](https://img.shields.io/npm/v/cve-scanner.svg?style=flat-square)](https://www.npmjs.com/pa...
20 versions - Latest release: about 12 hours ago - 2.22 thousand downloads last month - 0 stars on GitHub - 1 maintainer
sentinello 3.8.1
Scan the projects in a folder for vulnerable dependencies and write an advisory an agent can act on.
22 versions - Latest release: about 15 hours ago - 1.4 thousand downloads last month - 8 stars on GitHub - 1 maintainer
@cyberhub/trust-ldapjs-dn 1.0.0
Security Trust Report: @ldapjs/dn@1.1.0 — 64/100 (C+, standard). Maintainer risk, supply chain an...
1 version - Latest release: 6 months ago - 1 maintainer
@nebusec/nebu 1.0.15
NebuSec Platform security scanner CLI — run scans and query findings from the command line.
6 versions - Latest release: about 21 hours ago - 275 downloads last month - 2 maintainers
@cyanheads/osv-advisory-mcp-server 0.4.0 💰
Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory ...
20 versions - Latest release: about 22 hours ago - 1.13 thousand downloads last month - 2 stars on GitHub - 1 maintainer
@cyanheads/mitre-cwe-mcp-server 0.2.0 💰
Explore MITRE CWE weaknesses and CAPEC attack patterns, mitigations, code examples, and mappings ...
6 versions - Latest release: about 22 hours ago - 0 stars on GitHub - 1 maintainer
@jieai/dsh-plugin-vet 0.4.2
Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-...
34 versions - Latest release: about 22 hours ago - 2.53 thousand downloads last month - 3 stars on GitHub - 1 maintainer
vulnogram 0.1.0-rc1
Making the world safer one CVE at a time, since 2017. Tool for creating Security Advisories and C...
1 version - Latest release: about 4 years ago - 1 dependent package - 27 downloads last month - 249 stars on GitHub - 1 maintainer
break-anything 0.25.0
One CLI and MCP server for coding agents to find vulnerabilities across code, dependencies, apps,...
26 versions - Latest release: about 23 hours ago - 2.37 thousand downloads last month - 0 stars on GitHub - 1 maintainer
guardvibe 3.67.0 💰
Security infrastructure your AI can't be — deterministic, current past your model's training cuto...
242 versions - Latest release: 1 day ago - 11.8 thousand downloads last month - 6 stars on GitHub - 1 maintainer
Top 4.7% on npmjs.org
vuln-vects 1.1.0
A powerful, flexible CVSS parser, calculator and validator written for JavaScript/TypeScript.
2 versions - Latest release: over 4 years ago - 3 dependent packages - 20 dependent repositories - 95 thousand downloads last month - 12 stars on GitHub - 1 maintainer
dependabot-risk 1.0.1
Not an npm package — this name points at the Dependabot Risk Report GitHub Action. See the reposi...
2 versions - Latest release: 1 day ago - 36 downloads last month - 0 stars on GitHub - 1 maintainer
ecr-scan-verifier 0.2.2 💰
Verify ECR image scan findings during CDK deployment
23 versions - Latest release: 8 days ago - 428 downloads last month - 8 stars on GitHub - 1 maintainer
@cyberhub/trust-lru-queue 1.0.0
Security Trust Report: lru-queue@0.1.0 — 64/100 (C+, standard). Maintainer risk, supply chain ana...
1 version - Latest release: 7 months ago - 1 maintainer
contrastapi 1.6.0 💰
Official Node.js SDK for ContrastAPI — security intelligence for developers and AI agents
8 versions - Latest release: 4 months ago - 63 downloads last month - 35 stars on GitHub - 1 maintainer
exploitsearch 2.0.3 deprecated
A library for accessing ExploitSearch.net API, http://www.exploitsearch.net/
26 versions - Latest release: over 9 years ago - 2 dependent packages - 6 dependent repositories - 14 downloads last month - 5 stars on GitHub - 1 maintainer
x402-vuln 0.0.2
Vulnerability detection MCP - CVE lookup and dependency vulnerability scanning via x402
3 versions - Latest release: 1 day ago - 1 maintainer
x402-scan-audit 0.0.2
Code audit MCP - dependency vulnerability audit via x402
3 versions - Latest release: 1 day ago - 1 maintainer
@trustify-da/trustify-da-javascript-client 0.4.0
Code-Ready Dependency Analytics JavaScript API.
184 versions - Latest release: 22 days ago - 2.89 thousand downloads last month - 2 stars on GitHub - 4 maintainers
@kubbisec/mcp 0.1.15
KubbiSec MCP server — projects, vulnerabilities, AI remediation, and Naus CI helpers
14 versions - Latest release: about 2 months ago - 1.99 thousand downloads last month - 1 maintainer
@patchstack/connect 0.5.75
Runtime application security for JavaScript and Node.js: dependency inventory, attack-surface map...
117 versions - Latest release: 2 days ago - 7.3 thousand downloads last month - 1 stars on GitHub - 1 maintainer
cwe-tool 1.4.2 💰
A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
24 versions - Latest release: about 2 years ago - 1 dependent package - 144 downloads last month - 65 stars on GitHub - 2 maintainers
Top 5.8% on npmjs.org
cwe-sdk 1.1.19 💰
A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC
26 versions - Latest release: about 2 years ago - 3 dependent packages - 2 dependent repositories - 727 downloads last month - 32 stars on GitHub - 2 maintainers
opencode-vigia 0.1.1 💰
OpenCode plugin that helps web developers find, prove, and fix vulnerabilities with open weights ...
3 versions - Latest release: 11 days ago - 1 stars on GitHub - 1 maintainer
@insaidermobile-ux/pi-security-review 0.2.1
Security review for pi. Read-only agents find vulnerabilities, separate agents challenge each att...
6 versions - Latest release: 2 days ago - 0 stars on GitHub - 1 maintainer
@cyanheads/first-epss-mcp-server 0.2.0 💰
Look up FIRST EPSS exploitation scores and daily history, find CVEs by score threshold, and prior...
5 versions - Latest release: 2 days ago - 0 stars on GitHub - 1 maintainer
osv-scanner-mcp 0.21.2
MCP server that wraps Google's OSV-Scanner to scan Java, JavaScript, Python, Go, Rust, .NET, and ...
44 versions - Latest release: 2 days ago - 4.43 thousand downloads last month - 0 stars on GitHub - 1 maintainer
certfr-loader 2.0.6 removed
Module to load certfr from the CERT FR
29 versions - Latest release: about 8 years ago - 1 dependent package - 1 dependent repositories - 60 downloads last month - 0 stars on GitHub - 1 maintainer
cognium-dev 4.17.0 💰
Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking
218 versions - Latest release: 12 days ago - 3.55 thousand downloads last month - 5 stars on GitHub - 2 maintainers
cognium 1.8.3 💰
Semantic static analysis engine for detecting security vulnerabilities via taint tracking
38 versions - Latest release: 5 months ago - 299 downloads last month - 8 stars on GitHub - 2 maintainers
cognium-ai 4.22.0
AI-powered static analysis CLI with LLM-enhanced vulnerability detection
271 versions - Latest release: 13 days ago - 3.2 thousand downloads last month - 2 maintainers
@paretools/security 0.23.3 💰
MCP server for security scanning — structured Trivy, Semgrep, and Gitleaks findings for AI agents
34 versions - Latest release: 12 days ago - 133 downloads last month - 139 stars on GitHub - 1 maintainer
herozion 2.0.17
Security audit and performance analysis CLI tool for developers
109 versions - Latest release: 3 days ago - 2.98 thousand downloads last month - 1 maintainer
polyver 0.1.1
Compare package versions and evaluate VERS version ranges across ecosystems: npm, PyPI, Debian, R...
3 versions - Latest release: 4 days ago - 418 downloads last month - 1 maintainer
@quantumtiger/qv 4.0.0
Quantum Viper CLI (qv) - Professional AI-Powered Security Analysis
1 version - Latest release: 7 months ago - 29 downloads last month - 1 maintainer
dsh-plugin-cvescout 0.1.1
DeepSeek Harness plugin for CVE impact retesting: fingerprint a target, judge it against a CVE's ...
2 versions - Latest release: about 2 months ago - 0 stars on GitHub - 1 maintainer
xploitscan 1.18.16 💰
AI security scanner for vibe-coded apps. Find vulnerabilities before attackers do.
89 versions - Latest release: 3 days ago - 5.39 thousand downloads last month - 1 maintainer
pulsesec-cli 0.0.7
PulseSec CLI Agent - AI-Powered DAST Security Testing Tool for APIs
6 versions - Latest release: 9 months ago - 75 downloads last month - 1 maintainer
xploitscan-shared-rules 2.4.20 💰
Shared XploitScan rule definitions, helpers, compliance mappings, the AI false-positive filter, a...
95 versions - Latest release: 3 days ago - 4.83 thousand downloads last month - 1 maintainer
@cyberhub/trust-arcadialdev-arcality 1.0.6
Security Trust Report: @arcadialdev/arcality@2.4.36 — 65/100 (B, standard). Maintainer risk, supp...
7 versions - Latest release: 6 months ago - 1 maintainer
@cyberhub/trust-react-dom.js 1.0.0
Security Trust Report: react-dom.js@0.0.1-security — 64/100 (C+, standard). 1 vulnerability found...
1 version - Latest release: 7 months ago - 1 maintainer
@mrfentmen/epss-mcp 1.0.1
Exploit Prediction Scoring System scores: how likely a CVE will be exploited in the next 30 days ...
3 versions - Latest release: 3 days ago - 0 stars on GitHub - 1 maintainer
@thefaultvault/tfv-nvd-types 1.3.0
National Vulnerability Database typescript definitions for data feeds.
4 versions - Latest release: almost 7 years ago - 2 dependent packages - 1 dependent repositories - 236 downloads last month - 0 stars on GitHub - 1 maintainer
@arcane-spark/ubel-node 0.24.0
Software supply-chain and source-code security for Node.js. SCA: resolves dependencies, scans via...
37 versions - Latest release: 3 days ago - 1.36 thousand downloads last month - 4 stars on GitHub - 1 maintainer
osv-mcp 1.0.2
Use this MCP server to OSV open source vulnerability data and package security checks. Tools incl...
3 versions - Latest release: 12 days ago - 0 stars on GitHub - 1 maintainer
oxlint-plugin-openai-security 1.1.0 💰
The openai-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-openai-s...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-nestjs-security 3.2.0 💰
The nestjs-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-nestjs-s...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
@sooho/cli 0.3.4
CLI tool to interact with SOOHO
10 versions - Latest release: over 6 years ago - 1 dependent package - 1 dependent repositories - 26 downloads last month - 40 stars on GitHub - 3 maintainers
@sooho/advisory-db 0.3.4
A community-driven vulnerability database of smart contract
2 versions - Latest release: over 6 years ago - 2 dependent packages - 1 dependent repositories - 10 downloads last month - 40 stars on GitHub - 3 maintainers
@softwaresecurednpm/npm_plugin 1.0.31
Dependency checker and issue reporter
38 versions - Latest release: almost 8 years ago - 1 dependent package - 38 downloads last month - 1 stars on GitHub - 1 maintainer
oxlint-plugin-mysql-security 1.1.0 💰
The mysql-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-mysql-sec...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
vice-security 3.5.0 💰
VICE - Vulnerability Inspector & Code Examiner | Black-box & white-box security auditor for web a...
11 versions - Latest release: about 1 month ago - 2.25 thousand downloads last month - 600 stars on GitHub - 1 maintainer
oxlint-plugin-supabase-security 1.1.0 💰
The supabase-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-supaba...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-anthropic-security 1.1.0 💰
The anthropic-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-anthr...
3 versions - Latest release: 4 days ago - 0 downloads last month - 18 stars on GitHub - 1 maintainer
oxlint-plugin-mcp-sdk-security 1.1.0 💰
The mcp-sdk-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-mcp-sdk...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
Top 9.1% on npmjs.org
@bearer/tsconfig 0.116.1
Bearer TSconfig base
101 versions - Latest release: over 7 years ago - 4 dependent packages - 1 dependent repositories - 434 downloads last month - 2,774 stars on GitHub - 4 maintainers
Top 7.2% on npmjs.org
@bearer/package-init 0.116.1
[![oclif](https://img.shields.io/badge/cli-oclif-brightgreen.svg)](https://oclif.io) [![Version](...
109 versions - Latest release: over 7 years ago - 4 dependent packages - 1 dependent repositories - 694 downloads last month - 2,774 stars on GitHub - 4 maintainers
Top 6.2% on npmjs.org
@bearer/tslint-config 0.114.1
TSLint config for bearer team
109 versions - Latest release: over 7 years ago - 2 dependent packages - 3 dependent repositories - 394 downloads last month - 2,774 stars on GitHub - 4 maintainers
urbanjs-tool-retire 1.1.0
Urbanjs tool to check dependencies for vulnerability issues
5 versions - Latest release: about 9 years ago - 3 dependent packages - 1 dependent repositories - 11 downloads last month - 8 stars on GitHub - 1 maintainer
oxlint-plugin-node-security 5.8.0 💰
The node-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-node-secur...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
create-b 0.92.2
Quickly create a new Bearer scenario
1 version - Latest release: over 7 years ago - 1 dependent package - 1 dependent repositories - 15 downloads last month - 2,774 stars on GitHub - 1 maintainer
oxlint-plugin-typeorm-security 1.1.0 💰
The typeorm-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-typeorm...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-vercel-ai-security 2.4.0 💰
The vercel-ai-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-verce...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-postgresql-security 2.7.0 💰
The postgresql-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-post...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-jwt-security 3.6.0 💰
The jwt-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-jwt-security.
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
Top 3.7% on npmjs.org
recheck 4.6.2 💰
The trustworthy ReDoS checker
28 versions - Latest release: 5 days ago - 4 dependent packages - 40 dependent repositories - 679 thousand downloads last month - 301 stars on GitHub - 1 maintainer
Top 7.1% on npmjs.org
recheck-macos-x64 4.6.2 💰
The macOS 64-bit binary for recheck.
28 versions - Latest release: 5 days ago - 1 dependent package - 39 dependent repositories - 35.4 thousand downloads last month - 301 stars on GitHub - 1 maintainer
oxlint-plugin-sequelize-security 1.1.0 💰
The sequelize-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-seque...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
eslint-plugin-supabase-security 1.1.0 💰
ESLint plugin for Supabase security — catches the service_role key reaching client code, RPC call...
2 versions - Latest release: 4 days ago - 160 downloads last month - 18 stars on GitHub - 1 maintainer
Top 7.1% on npmjs.org
recheck-windows-x64 4.6.2 💰
The Windows 64-bit binary for recheck.
28 versions - Latest release: 5 days ago - 1 dependent package - 39 dependent repositories - 35.7 thousand downloads last month - 301 stars on GitHub - 1 maintainer
Top 2.9% on npmjs.org
eslint-plugin-redos 4.6.2 💰
ESLint plugin for catching ReDoS vulnerability
31 versions - Latest release: 5 days ago - 31 dependent packages - 45 dependent repositories - 304 thousand downloads last month - 301 stars on GitHub - 1 maintainer
recheck-linux-arm64 4.6.2 💰
The Linux 64-bit (ARM) binary for recheck.
5 versions - Latest release: 5 days ago - 82 thousand downloads last month - 301 stars on GitHub - 1 maintainer
oxlint-plugin-sqlite-security 1.1.0 💰
The sqlite-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-sqlite-s...
3 versions - Latest release: 4 days ago - 0 downloads last month - 18 stars on GitHub - 1 maintainer
oxlint-plugin-express-security 3.3.0 💰
The express-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-express...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
Top 7.0% on npmjs.org
recheck-jar 4.6.2 💰
The JAR archive for recheck.
24 versions - Latest release: 5 days ago - 1 dependent package - 35 dependent repositories - 675 thousand downloads last month - 301 stars on GitHub - 1 maintainer
oxlint-plugin-drizzle-security 1.1.0 💰
The drizzle-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-drizzle...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-lambda-security 2.2.0 💰
The lambda-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-lambda-s...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-mongodb-security 9.2.0 💰
The mongodb-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-mongodb...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
agentgg 0.1.28
Agentic SAST scanner — white box, CI-ready, multi-provider. Reasoning where regex falls short.
29 versions - Latest release: 4 days ago - 2.02 thousand downloads last month - 442 stars on GitHub - 1 maintainer
oxlint-plugin-prisma-security 1.1.0 💰
The prisma-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-prisma-s...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-secure-coding 5.5.0 💰
The secure-coding rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-secure-cod...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
recheck-macos-arm64 4.6.2 💰
The macOS 64-bit (ARM) binary for recheck.
10 versions - Latest release: 5 days ago - 88.6 thousand downloads last month - 301 stars on GitHub - 1 maintainer
Top 7.0% on npmjs.org
recheck-linux-x64 4.6.2 💰
The Linux 64-bit binary for recheck.
28 versions - Latest release: 5 days ago - 1 dependent package - 39 dependent repositories - 2.32 million downloads last month - 301 stars on GitHub - 1 maintainer
oxlint-plugin-gemini-security 1.1.0 💰
The gemini-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-gemini-s...
3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
nsauditor-ai 1.1.0
Modular AI-assisted network security audit platform — Community Edition
152 versions - Latest release: 4 days ago - 6.65 thousand downloads last month - 23 stars on GitHub - 1 maintainer
oxlint-plugin-browser-security 2.2.0 💰
The browser-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-browser...
3 versions - Latest release: 4 days ago - 0 downloads last month - 18 stars on GitHub - 1 maintainer
oxlint-plugin-knex-security 1.1.0 💰
The knex-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-knex-secur...
3 versions - Latest release: 4 days ago - 0 downloads last month - 18 stars on GitHub - 1 maintainer
@kabirkhanuja/siteshield 0.1.0
Audit a live website and the source code behind it in one pass: security headers, TLS, DNS, secre...
2 versions - Latest release: 4 days ago - 1 maintainer
@secureport/cli 0.10.1
Turn any scanner's output into a client-ready security report. Works entirely offline, with no ac...
15 versions - Latest release: 8 days ago - 0 downloads last month - 1 maintainer
@secureport/sdk 0.14.1
Typed client for the Secureport hosted API.
12 versions - Latest release: 4 days ago - 0 downloads last month - 1 maintainer
@secureport/core 4.2.1
Shared domain model for Secureport. Imported by the hosted API the same way a third party would.
21 versions - Latest release: 4 days ago - 0 downloads last month - 1 maintainer
@reshiftsecurity/reshift-plugin-npm 2.0.2
Security vulnerability scanner
11 versions - Latest release: about 5 years ago - 1 dependent package - 31 downloads last month - 1 stars on GitHub - 2 maintainers
soft-awake 1.0.2
Advanced NPM Package Security Analysis Tool with AI-Powered Intelligence
3 versions - Latest release: about 1 year ago - 32 downloads last month - 3 stars on GitHub - 1 maintainer
@passmarked/ssl 1.0.10
Rules that relate to checking the SSL configuration of each individual resolved server from the d...
10 versions - Latest release: over 8 years ago - 2 dependent packages - 1 dependent repositories - 142 downloads last month - 7 stars on GitHub - 1 maintainer
securewithtrace 0.55.0
Official Trace CLI for vulnerability intelligence in your terminal
77 versions - Latest release: 4 days ago - 634 downloads last month - 1 maintainer