An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

npmjs.org "vulnerability" keyword

@cyanheads/mitre-cwe-mcp-server 0.1.3 πŸ’°
Explore MITRE CWE weaknesses and CAPEC attack patterns, mitigations, code examples, and mappings ...
4 versions - Latest release: about 1 hour ago - 0 stars on GitHub - 1 maintainer
vulnogram 0.1.0-rc1
Making the world safer one CVE at a time, since 2017. Tool for creating Security Advisories and C...
1 version - Latest release: about 4 years ago - 1 dependent package - 54 downloads last month - 249 stars on GitHub - 1 maintainer
Top 4.7% on npmjs.org
vuln-vects 1.1.0
A powerful, flexible CVSS parser, calculator and validator written for JavaScript/TypeScript.
2 versions - Latest release: over 4 years ago - 3 dependent packages - 20 dependent repositories - 108 thousand downloads last month - 12 stars on GitHub - 1 maintainer
cyber-osint-scan-cli 1.0.0
Lightning‑fast OSINT & static code vulnerability scanner for developers
2 versions - Latest release: about 4 hours ago - 1 maintainer
arc-security-mcp 0.5.1
AI agent security: scan skills for 25 attack classes + runtime monitoring (EDR for AI agents). Re...
5 versions - Latest release: 8 months ago - 63 downloads last month - 1 maintainer
iamsecure 0.1.0
Scan a codebase for vulnerable dependencies and insecure code, ranked by real-world risk β€” with a...
2 versions - Latest release: about 7 hours ago - 1 maintainer
sentinello 3.7.2
Scan the projects in a folder for vulnerable dependencies and write an advisory an agent can act on.
15 versions - Latest release: 15 days ago - 953 downloads last month - 8 stars on GitHub - 1 maintainer
xploitscan 1.18.14 πŸ’°
AI security scanner for vibe-coded apps. Find vulnerabilities before attackers do.
87 versions - Latest release: about 14 hours ago - 5.39 thousand downloads last month - 1 maintainer
foxguard 0.14.1
A security scanner as fast as a linter, written in Rust. 200+ built-in rules across 12 source lan...
25 versions - Latest release: 5 days ago - 1.99 thousand downloads last month - 305 stars on GitHub - 1 maintainer
penthera 1.8.1 πŸ’°
Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, imp...
12 versions - Latest release: 1 day ago - 55 downloads last month - 47 stars on GitHub - 1 maintainer
xploitscan-shared-rules 2.4.18 πŸ’°
Shared XploitScan rule definitions, helpers, compliance mappings, the AI false-positive filter, a...
93 versions - Latest release: about 19 hours ago - 4.83 thousand downloads last month - 1 maintainer
stingward 0.1.6
Security check for AI-built projects, Claude Code skills and MCP servers: CVEs (OSV, NVD, CISA KE...
8 versions - Latest release: 2 days ago - 0 stars on GitHub - 1 maintainer
guardvibe 3.64.0 πŸ’°
Security infrastructure your AI can't be β€” deterministic, current past your model's training cuto...
239 versions - Latest release: about 21 hours ago - 7.98 thousand downloads last month - 6 stars on GitHub - 1 maintainer
php2shell-checker 0.1.0
Passive PHP patch-status check for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Read-only β€” rea...
2 versions - Latest release: about 22 hours ago - 1 maintainer
@trustify-da/trustify-da-javascript-client 0.4.0
Code-Ready Dependency Analytics JavaScript API.
182 versions - Latest release: 14 days ago - 2.89 thousand downloads last month - 2 stars on GitHub - 4 maintainers
tc-scanner 0.9.0
CI security scanner and controls runner. Scan Dockerfiles, images, dependencies, and secrets. Run...
17 versions - Latest release: about 23 hours ago - 536 downloads last month - 1 maintainer
osv-scanner-mcp 0.14.1
MCP server that wraps Google's OSV-Scanner to scan Java projects for known vulnerabilities
35 versions - Latest release: about 24 hours ago - 3.22 thousand downloads last month - 0 stars on GitHub - 1 maintainer
create-template-project 1.13.2
An ultra-modular, type-safe Node.js CLI tool used to scaffold new project templates (CLI, Webpage...
68 versions - Latest release: 1 day ago - 1.72 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@cyberhub/trust-synkos-ui 1.0.0
Security Trust Report: @synkos/ui@0.3.0 β€” 62/100 (C+, standard). Maintainer risk, supply chain an...
1 version - Latest release: 6 months ago - 1 maintainer
inup-windows-arm64 1.8.8
inup's native core for win32-arm64-msvc. Downloaded by `inup --native`; do not depend on it direc...
11 versions - Latest release: 1 day ago - 1.1 thousand downloads last month - 31 stars on GitHub - 1 maintainer
inup-darwin-arm64 1.8.8
inup's native core for darwin-arm64. Downloaded by `inup --native`; do not depend on it directly.
11 versions - Latest release: 1 day ago - 817 downloads last month - 31 stars on GitHub - 1 maintainer
inup-linux-x64-musl 1.8.8
inup's native core for linux-x64-musl. Downloaded by `inup --native`; do not depend on it directly.
11 versions - Latest release: 1 day ago - 830 downloads last month - 31 stars on GitHub - 1 maintainer
inup-linux-x64-gnu 1.8.8
inup's native core for linux-x64-gnu. Downloaded by `inup --native`; do not depend on it directly.
11 versions - Latest release: 1 day ago - 853 downloads last month - 31 stars on GitHub - 1 maintainer
Top 2.2% on npmjs.org
better-npm-audit 3.11.0 πŸ’°
Reshape into a better npm audit for the community and encourage more people to include security a...
70 versions - Latest release: about 2 years ago - 73 dependent packages - 81 dependent repositories - 833 thousand downloads last month - 144 stars on GitHub - 1 maintainer
@patchstack/connect 0.5.65
Runtime application security for JavaScript and Node.js: dependency inventory, attack-surface map...
107 versions - Latest release: 1 day ago - 4.77 thousand downloads last month - 1 stars on GitHub - 1 maintainer
finsec-scan 1.1.0
Security Scanner for Financial Applications - CLI tool for detecting vulnerabilities, secrets, an...
3 versions - Latest release: 12 months ago - 41 downloads last month - 1 maintainer
mcp-cve-intelligence-server-lite-test 0.1.0-alpha.0-20250803T114838 πŸ’°
Lite Model Context Protocol server for comprehensive CVE intelligence gathering with multi-source...
22 versions - Latest release: about 1 year ago - 182 downloads last month - 1 maintainer
@wwa/wpscan-mcp 1.0.1 πŸ’°
MCP server for the WPScan (wpscan.com) API
2 versions - Latest release: 10 months ago - 56 downloads last month - 0 stars on GitHub - 1 maintainer
contrastapi 1.6.0 πŸ’°
Official Node.js SDK for ContrastAPI β€” security intelligence for developers and AI agents
8 versions - Latest release: 4 months ago - 64 downloads last month - 35 stars on GitHub - 1 maintainer
crowbar-cli 0.1.0
Retrieve CVEs and index them inside your codebase. One SQLite+FTS5 index, one CLI, one MCP server...
2 versions - Latest release: 1 day ago - 1 maintainer
@dongit/n8n-nodes-reporter 2026.10.21
n8n nodes for Security Reporter - Automate security assessments, findings, and vulnerability mana...
20 versions - Latest release: 1 day ago - 293 downloads last month - 0 stars on GitHub - 3 maintainers
@fairquery/agent-trust-mcp 1.1.5
Fairquery Agent Trust & Data Safety MCP server: PII/secret redaction, email validation, sanctions...
17 versions - Latest release: 3 days ago - 2.39 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@devsecure/intelligence-mcp 0.2.1
MCP server for DevSecure Intelligence: rank CVEs by real-world risk (RPS from CVSS, EPSS and CISA...
3 versions - Latest release: 2 days ago - 2 maintainers
cve-lite-cli 1.40.0 πŸ’°
Developer-friendly CLI for scanning JS/TS projects for dependency vulnerabilities using local loc...
65 versions - Latest release: 2 days ago - 33.5 thousand downloads last month - 769 stars on GitHub - 1 maintainer
@gristup/security-scanner 1.0.0
Security scanner for Grist custom widgets - Detects potential security threats in widget code
1 version - Latest release: 8 months ago - 9 downloads last month - 0 stars on GitHub - 1 maintainer
inup 1.8.6
Interactive dependency upgrader for npm, yarn, pnpm & bun. Changelogs, vulnerability audit, monor...
41 versions - Latest release: 2 days ago - 1.25 thousand downloads last month - 32 stars on GitHub - 1 maintainer
inup-darwin-x64 1.8.6
inup's native core for darwin-x64. Downloaded by `inup --native`; do not depend on it directly.
9 versions - Latest release: 2 days ago - 802 downloads last month - 32 stars on GitHub - 1 maintainer
inup-windows-x64 1.8.6
inup's native core for win32-x64-msvc. Downloaded by `inup --native`; do not depend on it directly.
9 versions - Latest release: 2 days ago - 1.09 thousand downloads last month - 32 stars on GitHub - 1 maintainer
inup-linux-arm64-gnu 1.8.6
inup's native core for linux-arm64-gnu. Downloaded by `inup --native`; do not depend on it directly.
9 versions - Latest release: 2 days ago - 1.11 thousand downloads last month - 32 stars on GitHub - 1 maintainer
inup-linux-arm64-musl 1.8.6
inup's native core for linux-arm64-musl. Downloaded by `inup --native`; do not depend on it direc...
9 versions - Latest release: 2 days ago - 1.12 thousand downloads last month - 32 stars on GitHub - 1 maintainer
shield-checkup 0.1.0
Free baseline security scan for any website β€” powered by SherDore Shield.
1 version - Latest release: about 1 month ago - 40 downloads last month - 0 stars on GitHub - 1 maintainer
dep-collide 0.1.0
Multi-ecosystem dependency-collision & vulnerability scanner (npm, Go, Python, Rust, PHP) β€” CLI +...
1 version - Latest release: about 1 month ago - 0 stars on GitHub - 4 maintainers
bartizan 0.1.0
Fail your CI build when a dependency has a known vulnerability. Works with npm, Yarn 1-4, pnpm an...
1 version - Latest release: about 1 month ago - 0 stars on GitHub - 1 maintainer
@eluter/security-encrypt 0.1.0
CLI to encrypt vulnerability reports with PGP for security@eluter.com. Runs from anywhere via npx...
1 version - Latest release: about 1 month ago - 0 stars on GitHub - 1 maintainer
lamassu 0.1.0
Fail your CI build on vulnerable dependencies. Works with npm, Yarn 1-4, pnpm and Bun.
1 version - Latest release: about 1 month ago - 0 stars on GitHub - 1 maintainer
securewithtrace 0.50.0
Official Trace CLI for vulnerability intelligence in your terminal
73 versions - Latest release: 3 days ago - 1.31 thousand downloads last month - 1 maintainer
@paretools/security 0.23.3 πŸ’°
MCP server for security scanning β€” structured Trivy, Semgrep, and Gitleaks findings for AI agents
34 versions - Latest release: 4 days ago - 133 downloads last month - 139 stars on GitHub - 1 maintainer
safecheck 0.1.0
Supply-chain risk scanner for npm, PyPI, and Maven packages - typosquats, maintainer takeovers, i...
1 version - Latest release: about 2 months ago - 131 downloads last month - 0 stars on GitHub - 1 maintainer
safecheck-mcp 0.1.0
MCP server exposing PackageSafe's supply-chain risk scanning (npm/PyPI/Maven) as tools an AI agen...
1 version - Latest release: about 2 months ago - 9 downloads last month - 0 stars on GitHub - 1 maintainer
secflow 0.4.1
SECflow β€” zero-cost security scanning for AI-driven repos: secrets (gitleaks), dependency vulns (...
5 versions - Latest release: about 2 months ago - 562 downloads last month - 1 stars on GitHub - 1 maintainer
@seekingdata/mcp 0.2.1
MCP server for the seekingdata API: typed tools for live, fully sourced market data (crypto, FX, ...
4 versions - Latest release: about 2 months ago - 34 downloads last month - 1 maintainer
hyperdope 0.3.1
MCP server for adversarial security research β€” 6-phase pipeline from profile to disclosure
5 versions - Latest release: about 2 months ago - 8 stars on GitHub - 1 maintainer
delivery-intel 1.8.2
Evidence-driven repo intelligence: DORA metrics, forensic signals, vulnerability scan, and delive...
11 versions - Latest release: 4 days ago - 505 thousand downloads last month - 188 stars on GitHub - 1 maintainer
@nsasoft/nsauditor-ai-ee 0.42.0
NSAuditor AI β€” Pro & Enterprise Edition plugin package
126 versions - Latest release: about 2 months ago - 1 maintainer
@securenexus/sova 1.1.0
SOVA - Supply Chain Orchestration & Visualization Assistant. Extract dependency information from ...
1 version - Latest release: 2 months ago - 19 downloads last month - 0 stars on GitHub - 1 maintainer
security-txt-parser 1.0.0
Parse, validate, and serialize RFC 9116 security.txt files in TypeScript.
1 version - Latest release: 2 months ago - 1 stars on GitHub - 1 maintainer
@onamfc/security-scanner 1.0.0 πŸ’°
Enterprise-grade CLI security scanner for detecting secrets and vulnerabilities in codebases
1 version - Latest release: 11 months ago - 16 downloads last month - 3 stars on GitHub - 1 maintainer
vetdeps 1.0.0 πŸ’°
Tells you whether a package you are about to install is the one you think it is. Catches typosqua...
1 version - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
depguard-cli 1.15.2 πŸ’°
Was my machine hit by an npm supply-chain attack? Scans every lock file, global install and the n...
30 versions - Latest release: 8 days ago - 270 downloads last month - 15 stars on GitHub - 1 maintainer
depguard.ai 1.1.0 deprecated πŸ’°
Audit npm packages for security, maintenance, licenses and dependencies. Recommends install or wr...
2 versions - Latest release: 7 months ago - 23 downloads last month - 15 stars on GitHub - 1 maintainer
niyantri 0.1.0
Dependency vulnerability scanner that ranks by real exploitability β€” reachability analysis, CISA ...
1 version - Latest release: 2 months ago - 1 maintainer
scanpay-mcp-server 0.3.0
MCP server for ScanPay code security scanning with x402 payments
3 versions - Latest release: 2 months ago - 136 downloads last month - 0 stars on GitHub - 1 maintainer
scanpay-cli 0.3.0
Code security scanner with x402 v2 micropayments β€” Python + JS/TS, /usr/bin/bash.10/scan
3 versions - Latest release: 2 months ago - 21 downloads last month - 0 stars on GitHub - 1 maintainer
bugcrowd-cli 0.1.0
Unofficial command-line client for the Bugcrowd REST API, built for humans and AI coding agents.
1 version - Latest release: 2 months ago - 0 downloads last month - 0 stars on GitHub - 1 maintainer
orion-security-cli 0.4.1
Software assurance & security audit platform. 360Β° interactive CLI suite, cross-file AST taint, V...
4 versions - Latest release: 2 months ago - 0 downloads last month - 1 maintainer
@cyberhub/trust-meetcast-hub 1.0.0
Security Trust Report: @meetcast/hub@0.0.12 β€” 62/100 (C+, standard). Maintainer risk, supply chai...
1 version - Latest release: 6 months ago - 35 downloads last month - 1 maintainer
@vidhaankhare/vibeguard 2.0.2
Gemini-powered security auditor for AI-generated code. Scans a folder and writes a Markdown vulne...
4 versions - Latest release: 2 months ago - 29 downloads last month - 2 stars on GitHub - 1 maintainer
pledgestrike 0.0.5
An all-in-one offensive security toolkit built in Rust. 250+ independent attack modules covering ...
5 versions - Latest release: 2 months ago - 246 downloads last month - 1 stars on GitHub - 1 maintainer
jokalala-cli 0.2.22
Jokalala Static Code Analyzer - Enterprise-grade security scanning CLI
23 versions - Latest release: 2 months ago - 3.05 thousand downloads last month - 1 maintainer
pledgeshield 0.0.2
Personal device security auditor β€” finds what antivirus misses. Scans for misconfigurations, expo...
2 versions - Latest release: 2 months ago - 294 downloads last month - 0 stars on GitHub - 1 maintainer
nazar-audit 0.1.1
A modern, security-conscious package vulnerability scanner for the JavaScript ecosystem. Wraps np...
5 versions - Latest release: 3 months ago - 548 downloads last month - 0 stars on GitHub - 1 maintainer
@insaidermobile-ux/pi-security-review 0.2.0
Security review for pi. Read-only agents find vulnerabilities, separate agents challenge each att...
5 versions - Latest release: 3 days ago - 0 stars on GitHub - 1 maintainer
@yagyeshvyas/vibeguard 1.3.0 πŸ’°
Security scanner + AI agent firewall. Blocks secret/PII exfiltration in real time. 752 rules, 82 ...
7 versions - Latest release: 3 months ago - 1.2 thousand downloads last month - 7 stars on GitHub - 1 maintainer
vice-security 3.5.0 πŸ’°
VICE - Vulnerability Inspector & Code Examiner | Black-box & white-box security auditor for web a...
11 versions - Latest release: 29 days ago - 2.25 thousand downloads last month - 599 stars on GitHub - 1 maintainer
@lowdep/depwarden 1.0.8 πŸ’°
DepWarden CLI β€” scan your npm/yarn/pnpm project for supply chain vulnerabilities
7 versions - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
@cairnsec/opf-tools 0.2.1
Converters between the Open Pentest Format (OPF) and SARIF, DefectDojo, Jira, GitHub, GitLab, Lin...
5 versions - Latest release: 2 months ago - 412 downloads last month - 0 stars on GitHub - 1 maintainer
Top 7.2% on npmjs.org
@bearer/package-init 0.116.1
[![oclif](https://img.shields.io/badge/cli-oclif-brightgreen.svg)](https://oclif.io) [![Version](...
109 versions - Latest release: over 7 years ago - 4 dependent packages - 1 dependent repositories - 173 downloads last month - 2,765 stars on GitHub - 4 maintainers
Top 6.2% on npmjs.org
@bearer/tslint-config 0.114.1
TSLint config for bearer team
109 versions - Latest release: over 7 years ago - 2 dependent packages - 3 dependent repositories - 224 downloads last month - 2,765 stars on GitHub - 4 maintainers
Top 9.1% on npmjs.org
@bearer/tsconfig 0.116.1
Bearer TSconfig base
101 versions - Latest release: over 7 years ago - 4 dependent packages - 1 dependent repositories - 125 downloads last month - 2,765 stars on GitHub - 4 maintainers
create-b 0.92.2
Quickly create a new Bearer scenario
1 version - Latest release: over 7 years ago - 1 dependent package - 1 dependent repositories - 11 downloads last month - 2,765 stars on GitHub - 1 maintainer
sphior-code-mcp 1.1.8
Official Model Context Protocol (MCP) server for SPHIOR CODE β€” surface security findings from you...
13 versions - Latest release: 3 days ago - 182 downloads last month - 1 stars on GitHub - 1 maintainer
eslint-plugin-mongodb-security 9.1.6 πŸ’°
ESLint plugin for MongoDB and Mongoose security β€” detects NoSQL operator injection, unsafe querie...
29 versions - Latest release: 3 days ago - 5.89 thousand downloads last month - 19 stars on GitHub - 1 maintainer
opencode-vigia 0.1.0
OpenCode plugin that helps web developers find, prove, and fix vulnerabilities with open weights ...
2 versions - Latest release: 3 days ago - 1 maintainer
eslint-plugin-knex-security 1.0.1 πŸ’°
ESLint plugin for knex β€” detects SQL injection in raw queries built with string concatenation or ...
16 versions - Latest release: 3 days ago - 3.08 thousand downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-sequelize-security 1.0.1 πŸ’°
ESLint plugin for the Sequelize ORM β€” detects SQL injection in raw sequelize.query() and Sequeliz...
16 versions - Latest release: 3 days ago - 1.06 thousand downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-typeorm-security 1.0.1 πŸ’°
ESLint plugin for typeorm β€” detects SQL injection in raw queries built with string concatenation ...
15 versions - Latest release: 3 days ago - 1.81 thousand downloads last month - 19 stars on GitHub - 1 maintainer
@4da/mcp-server 6.2.4
Upgrade intelligence for AI coding agents: what changes between your installed and target version...
30 versions - Latest release: 11 days ago - 1.5 thousand downloads last month - 0 stars on GitHub - 1 maintainer
vetguard 0.3.0
Local-first scanner for AI-era npm supply-chain threats: hallucinated (slopsquatted) dependencies...
4 versions - Latest release: 3 months ago - 0 stars on GitHub - 1 maintainer
claude-security 0.1.1
Claude-powered security scanning: CLI and TypeScript SDK that drives the Claude Agent SDK through...
2 versions - Latest release: 3 months ago - 0 stars on GitHub - 1 maintainer
@arcane-spark/ubel-node 0.23.0
Software supply-chain and source-code security for Node.js. SCA: resolves dependencies, scans via...
36 versions - Latest release: 3 days ago - 2.49 thousand downloads last month - 4 stars on GitHub - 1 maintainer
eslint-plugin-mcp-sdk-security 1.0.1 πŸ’°
ESLint plugin for Model Context Protocol (MCP) SDK security β€” follows tool arguments into shells,...
15 versions - Latest release: 3 days ago - 2.52 thousand downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-postgresql-security 2.6.3 πŸ’°
ESLint plugin for the pg PostgreSQL driver β€” detects SQL injection, unreleased clients, floating ...
20 versions - Latest release: 3 days ago - 990 downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-jwt-security 3.5.3 πŸ’°
ESLint plugin for JWT security β€” detects algorithm confusion (CVE-2022-23540), alg:none, weak or ...
21 versions - Latest release: 3 days ago - 3.32 thousand downloads last month - 19 stars on GitHub - 1 maintainer
w-scan-vulnerability 1.0.3
A scanner for vulnerabilities in nodejs.
4 versions - Latest release: 4 days ago - 452 downloads last month - 0 stars on GitHub - 1 maintainer
@roshcompanylabs/cra-kit 0.1.0
Turn an npm repo into the EU Cyber Resilience Act evidence the free SBOM tools don't produce: SBO...
2 versions - Latest release: 4 days ago - 0 stars on GitHub - 1 maintainer
w-scan-dep 1.0.8
A scanner for dependencies in nodejs.
9 versions - Latest release: 4 days ago - 600 downloads last month - 0 stars on GitHub - 1 maintainer
argus-codescan 0.5.1
Security scanner for React, Next.js & Node β€” SCA, SAST, secrets. CSV reports. For malware/ML/SARI...
9 versions - Latest release: 13 days ago - 11 stars on GitHub - 1 maintainer
vettcode-cli 3.0.7
CLI version of VettCode - AI-powered codebase security and quality scanner
44 versions - Latest release: 3 months ago - 1 stars on GitHub - 1 maintainer
arhus-cli 0.4.0
local-first security analysis for TypeScript & JavaScript
14 versions - Latest release: 2 months ago - 432 downloads last month - 9 stars on GitHub - 1 maintainer
safeey-cli 0.7.0
Scan your source code for security vulnerabilities β€” a Safeey product by Noohra Innovate Ltd.
6 versions - Latest release: 3 months ago - 246 downloads last month - 1 maintainer