npmjs.org "vulnerability" keyword
@cyanheads/mitre-cwe-mcp-server 0.1.3 π°
Explore MITRE CWE weaknesses and CAPEC attack patterns, mitigations, code examples, and mappings ...4 versions - Latest release: about 1 hour ago - 0 stars on GitHub - 1 maintainer
vulnogram 0.1.0-rc1
Making the world safer one CVE at a time, since 2017. Tool for creating Security Advisories and C...1 version - Latest release: about 4 years ago - 1 dependent package - 54 downloads last month - 249 stars on GitHub - 1 maintainer
Top 4.7% on npmjs.org
2 versions - Latest release: over 4 years ago - 3 dependent packages - 20 dependent repositories - 108 thousand downloads last month - 12 stars on GitHub - 1 maintainer
vuln-vects 1.1.0
A powerful, flexible CVSS parser, calculator and validator written for JavaScript/TypeScript.2 versions - Latest release: over 4 years ago - 3 dependent packages - 20 dependent repositories - 108 thousand downloads last month - 12 stars on GitHub - 1 maintainer
cyber-osint-scan-cli 1.0.0
Lightningβfast OSINT & static code vulnerability scanner for developers2 versions - Latest release: about 4 hours ago - 1 maintainer
arc-security-mcp 0.5.1
AI agent security: scan skills for 25 attack classes + runtime monitoring (EDR for AI agents). Re...5 versions - Latest release: 8 months ago - 63 downloads last month - 1 maintainer
iamsecure 0.1.0
Scan a codebase for vulnerable dependencies and insecure code, ranked by real-world risk β with a...2 versions - Latest release: about 7 hours ago - 1 maintainer
sentinello 3.7.2
Scan the projects in a folder for vulnerable dependencies and write an advisory an agent can act on.15 versions - Latest release: 15 days ago - 953 downloads last month - 8 stars on GitHub - 1 maintainer
xploitscan 1.18.14 π°
AI security scanner for vibe-coded apps. Find vulnerabilities before attackers do.87 versions - Latest release: about 14 hours ago - 5.39 thousand downloads last month - 1 maintainer
foxguard 0.14.1
A security scanner as fast as a linter, written in Rust. 200+ built-in rules across 12 source lan...25 versions - Latest release: 5 days ago - 1.99 thousand downloads last month - 305 stars on GitHub - 1 maintainer
penthera 1.8.1 π°
Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, imp...12 versions - Latest release: 1 day ago - 55 downloads last month - 47 stars on GitHub - 1 maintainer
xploitscan-shared-rules 2.4.18 π°
Shared XploitScan rule definitions, helpers, compliance mappings, the AI false-positive filter, a...93 versions - Latest release: about 19 hours ago - 4.83 thousand downloads last month - 1 maintainer
stingward 0.1.6
Security check for AI-built projects, Claude Code skills and MCP servers: CVEs (OSV, NVD, CISA KE...8 versions - Latest release: 2 days ago - 0 stars on GitHub - 1 maintainer
guardvibe 3.64.0 π°
Security infrastructure your AI can't be β deterministic, current past your model's training cuto...239 versions - Latest release: about 21 hours ago - 7.98 thousand downloads last month - 6 stars on GitHub - 1 maintainer
php2shell-checker 0.1.0
Passive PHP patch-status check for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Read-only β rea...2 versions - Latest release: about 22 hours ago - 1 maintainer
@trustify-da/trustify-da-javascript-client 0.4.0
Code-Ready Dependency Analytics JavaScript API.182 versions - Latest release: 14 days ago - 2.89 thousand downloads last month - 2 stars on GitHub - 4 maintainers
tc-scanner 0.9.0
CI security scanner and controls runner. Scan Dockerfiles, images, dependencies, and secrets. Run...17 versions - Latest release: about 23 hours ago - 536 downloads last month - 1 maintainer
osv-scanner-mcp 0.14.1
MCP server that wraps Google's OSV-Scanner to scan Java projects for known vulnerabilities35 versions - Latest release: about 24 hours ago - 3.22 thousand downloads last month - 0 stars on GitHub - 1 maintainer
create-template-project 1.13.2
An ultra-modular, type-safe Node.js CLI tool used to scaffold new project templates (CLI, Webpage...68 versions - Latest release: 1 day ago - 1.72 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@cyberhub/trust-synkos-ui 1.0.0
Security Trust Report: @synkos/ui@0.3.0 β 62/100 (C+, standard). Maintainer risk, supply chain an...1 version - Latest release: 6 months ago - 1 maintainer
inup-windows-arm64 1.8.8
inup's native core for win32-arm64-msvc. Downloaded by `inup --native`; do not depend on it direc...11 versions - Latest release: 1 day ago - 1.1 thousand downloads last month - 31 stars on GitHub - 1 maintainer
inup-darwin-arm64 1.8.8
inup's native core for darwin-arm64. Downloaded by `inup --native`; do not depend on it directly.11 versions - Latest release: 1 day ago - 817 downloads last month - 31 stars on GitHub - 1 maintainer
inup-linux-x64-musl 1.8.8
inup's native core for linux-x64-musl. Downloaded by `inup --native`; do not depend on it directly.11 versions - Latest release: 1 day ago - 830 downloads last month - 31 stars on GitHub - 1 maintainer
inup-linux-x64-gnu 1.8.8
inup's native core for linux-x64-gnu. Downloaded by `inup --native`; do not depend on it directly.11 versions - Latest release: 1 day ago - 853 downloads last month - 31 stars on GitHub - 1 maintainer
Top 2.2% on npmjs.org
70 versions - Latest release: about 2 years ago - 73 dependent packages - 81 dependent repositories - 833 thousand downloads last month - 144 stars on GitHub - 1 maintainer
better-npm-audit 3.11.0 π°
Reshape into a better npm audit for the community and encourage more people to include security a...70 versions - Latest release: about 2 years ago - 73 dependent packages - 81 dependent repositories - 833 thousand downloads last month - 144 stars on GitHub - 1 maintainer
@patchstack/connect 0.5.65
Runtime application security for JavaScript and Node.js: dependency inventory, attack-surface map...107 versions - Latest release: 1 day ago - 4.77 thousand downloads last month - 1 stars on GitHub - 1 maintainer
finsec-scan 1.1.0
Security Scanner for Financial Applications - CLI tool for detecting vulnerabilities, secrets, an...3 versions - Latest release: 12 months ago - 41 downloads last month - 1 maintainer
mcp-cve-intelligence-server-lite-test 0.1.0-alpha.0-20250803T114838 π°
Lite Model Context Protocol server for comprehensive CVE intelligence gathering with multi-source...22 versions - Latest release: about 1 year ago - 182 downloads last month - 1 maintainer
@wwa/wpscan-mcp 1.0.1 π°
MCP server for the WPScan (wpscan.com) API2 versions - Latest release: 10 months ago - 56 downloads last month - 0 stars on GitHub - 1 maintainer
contrastapi 1.6.0 π°
Official Node.js SDK for ContrastAPI β security intelligence for developers and AI agents8 versions - Latest release: 4 months ago - 64 downloads last month - 35 stars on GitHub - 1 maintainer
crowbar-cli 0.1.0
Retrieve CVEs and index them inside your codebase. One SQLite+FTS5 index, one CLI, one MCP server...2 versions - Latest release: 1 day ago - 1 maintainer
@dongit/n8n-nodes-reporter 2026.10.21
n8n nodes for Security Reporter - Automate security assessments, findings, and vulnerability mana...20 versions - Latest release: 1 day ago - 293 downloads last month - 0 stars on GitHub - 3 maintainers
@fairquery/agent-trust-mcp 1.1.5
Fairquery Agent Trust & Data Safety MCP server: PII/secret redaction, email validation, sanctions...17 versions - Latest release: 3 days ago - 2.39 thousand downloads last month - 0 stars on GitHub - 1 maintainer
@devsecure/intelligence-mcp 0.2.1
MCP server for DevSecure Intelligence: rank CVEs by real-world risk (RPS from CVSS, EPSS and CISA...3 versions - Latest release: 2 days ago - 2 maintainers
cve-lite-cli 1.40.0 π°
Developer-friendly CLI for scanning JS/TS projects for dependency vulnerabilities using local loc...65 versions - Latest release: 2 days ago - 33.5 thousand downloads last month - 769 stars on GitHub - 1 maintainer
@gristup/security-scanner 1.0.0
Security scanner for Grist custom widgets - Detects potential security threats in widget code1 version - Latest release: 8 months ago - 9 downloads last month - 0 stars on GitHub - 1 maintainer
inup 1.8.6
Interactive dependency upgrader for npm, yarn, pnpm & bun. Changelogs, vulnerability audit, monor...41 versions - Latest release: 2 days ago - 1.25 thousand downloads last month - 32 stars on GitHub - 1 maintainer
inup-darwin-x64 1.8.6
inup's native core for darwin-x64. Downloaded by `inup --native`; do not depend on it directly.9 versions - Latest release: 2 days ago - 802 downloads last month - 32 stars on GitHub - 1 maintainer
inup-windows-x64 1.8.6
inup's native core for win32-x64-msvc. Downloaded by `inup --native`; do not depend on it directly.9 versions - Latest release: 2 days ago - 1.09 thousand downloads last month - 32 stars on GitHub - 1 maintainer
inup-linux-arm64-gnu 1.8.6
inup's native core for linux-arm64-gnu. Downloaded by `inup --native`; do not depend on it directly.9 versions - Latest release: 2 days ago - 1.11 thousand downloads last month - 32 stars on GitHub - 1 maintainer
inup-linux-arm64-musl 1.8.6
inup's native core for linux-arm64-musl. Downloaded by `inup --native`; do not depend on it direc...9 versions - Latest release: 2 days ago - 1.12 thousand downloads last month - 32 stars on GitHub - 1 maintainer
shield-checkup 0.1.0
Free baseline security scan for any website β powered by SherDore Shield.1 version - Latest release: about 1 month ago - 40 downloads last month - 0 stars on GitHub - 1 maintainer
dep-collide 0.1.0
Multi-ecosystem dependency-collision & vulnerability scanner (npm, Go, Python, Rust, PHP) β CLI +...1 version - Latest release: about 1 month ago - 0 stars on GitHub - 4 maintainers
bartizan 0.1.0
Fail your CI build when a dependency has a known vulnerability. Works with npm, Yarn 1-4, pnpm an...1 version - Latest release: about 1 month ago - 0 stars on GitHub - 1 maintainer
@eluter/security-encrypt 0.1.0
CLI to encrypt vulnerability reports with PGP for security@eluter.com. Runs from anywhere via npx...1 version - Latest release: about 1 month ago - 0 stars on GitHub - 1 maintainer
lamassu 0.1.0
Fail your CI build on vulnerable dependencies. Works with npm, Yarn 1-4, pnpm and Bun.1 version - Latest release: about 1 month ago - 0 stars on GitHub - 1 maintainer
securewithtrace 0.50.0
Official Trace CLI for vulnerability intelligence in your terminal73 versions - Latest release: 3 days ago - 1.31 thousand downloads last month - 1 maintainer
@paretools/security 0.23.3 π°
MCP server for security scanning β structured Trivy, Semgrep, and Gitleaks findings for AI agents34 versions - Latest release: 4 days ago - 133 downloads last month - 139 stars on GitHub - 1 maintainer
safecheck 0.1.0
Supply-chain risk scanner for npm, PyPI, and Maven packages - typosquats, maintainer takeovers, i...1 version - Latest release: about 2 months ago - 131 downloads last month - 0 stars on GitHub - 1 maintainer
safecheck-mcp 0.1.0
MCP server exposing PackageSafe's supply-chain risk scanning (npm/PyPI/Maven) as tools an AI agen...1 version - Latest release: about 2 months ago - 9 downloads last month - 0 stars on GitHub - 1 maintainer
secflow 0.4.1
SECflow β zero-cost security scanning for AI-driven repos: secrets (gitleaks), dependency vulns (...5 versions - Latest release: about 2 months ago - 562 downloads last month - 1 stars on GitHub - 1 maintainer
@seekingdata/mcp 0.2.1
MCP server for the seekingdata API: typed tools for live, fully sourced market data (crypto, FX, ...4 versions - Latest release: about 2 months ago - 34 downloads last month - 1 maintainer
hyperdope 0.3.1
MCP server for adversarial security research β 6-phase pipeline from profile to disclosure5 versions - Latest release: about 2 months ago - 8 stars on GitHub - 1 maintainer
delivery-intel 1.8.2
Evidence-driven repo intelligence: DORA metrics, forensic signals, vulnerability scan, and delive...11 versions - Latest release: 4 days ago - 505 thousand downloads last month - 188 stars on GitHub - 1 maintainer
@nsasoft/nsauditor-ai-ee 0.42.0
NSAuditor AI β Pro & Enterprise Edition plugin package126 versions - Latest release: about 2 months ago - 1 maintainer
@securenexus/sova 1.1.0
SOVA - Supply Chain Orchestration & Visualization Assistant. Extract dependency information from ...1 version - Latest release: 2 months ago - 19 downloads last month - 0 stars on GitHub - 1 maintainer
security-txt-parser 1.0.0
Parse, validate, and serialize RFC 9116 security.txt files in TypeScript.1 version - Latest release: 2 months ago - 1 stars on GitHub - 1 maintainer
@onamfc/security-scanner 1.0.0 π°
Enterprise-grade CLI security scanner for detecting secrets and vulnerabilities in codebases1 version - Latest release: 11 months ago - 16 downloads last month - 3 stars on GitHub - 1 maintainer
vetdeps 1.0.0 π°
Tells you whether a package you are about to install is the one you think it is. Catches typosqua...1 version - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
depguard-cli 1.15.2 π°
Was my machine hit by an npm supply-chain attack? Scans every lock file, global install and the n...30 versions - Latest release: 8 days ago - 270 downloads last month - 15 stars on GitHub - 1 maintainer
depguard.ai 1.1.0 deprecated π°
Audit npm packages for security, maintenance, licenses and dependencies. Recommends install or wr...2 versions - Latest release: 7 months ago - 23 downloads last month - 15 stars on GitHub - 1 maintainer
niyantri 0.1.0
Dependency vulnerability scanner that ranks by real exploitability β reachability analysis, CISA ...1 version - Latest release: 2 months ago - 1 maintainer
scanpay-mcp-server 0.3.0
MCP server for ScanPay code security scanning with x402 payments3 versions - Latest release: 2 months ago - 136 downloads last month - 0 stars on GitHub - 1 maintainer
scanpay-cli 0.3.0
Code security scanner with x402 v2 micropayments β Python + JS/TS, /usr/bin/bash.10/scan3 versions - Latest release: 2 months ago - 21 downloads last month - 0 stars on GitHub - 1 maintainer
bugcrowd-cli 0.1.0
Unofficial command-line client for the Bugcrowd REST API, built for humans and AI coding agents.1 version - Latest release: 2 months ago - 0 downloads last month - 0 stars on GitHub - 1 maintainer
orion-security-cli 0.4.1
Software assurance & security audit platform. 360Β° interactive CLI suite, cross-file AST taint, V...4 versions - Latest release: 2 months ago - 0 downloads last month - 1 maintainer
@cyberhub/trust-meetcast-hub 1.0.0
Security Trust Report: @meetcast/hub@0.0.12 β 62/100 (C+, standard). Maintainer risk, supply chai...1 version - Latest release: 6 months ago - 35 downloads last month - 1 maintainer
@vidhaankhare/vibeguard 2.0.2
Gemini-powered security auditor for AI-generated code. Scans a folder and writes a Markdown vulne...4 versions - Latest release: 2 months ago - 29 downloads last month - 2 stars on GitHub - 1 maintainer
pledgestrike 0.0.5
An all-in-one offensive security toolkit built in Rust. 250+ independent attack modules covering ...5 versions - Latest release: 2 months ago - 246 downloads last month - 1 stars on GitHub - 1 maintainer
jokalala-cli 0.2.22
Jokalala Static Code Analyzer - Enterprise-grade security scanning CLI23 versions - Latest release: 2 months ago - 3.05 thousand downloads last month - 1 maintainer
pledgeshield 0.0.2
Personal device security auditor β finds what antivirus misses. Scans for misconfigurations, expo...2 versions - Latest release: 2 months ago - 294 downloads last month - 0 stars on GitHub - 1 maintainer
nazar-audit 0.1.1
A modern, security-conscious package vulnerability scanner for the JavaScript ecosystem. Wraps np...5 versions - Latest release: 3 months ago - 548 downloads last month - 0 stars on GitHub - 1 maintainer
@insaidermobile-ux/pi-security-review 0.2.0
Security review for pi. Read-only agents find vulnerabilities, separate agents challenge each att...5 versions - Latest release: 3 days ago - 0 stars on GitHub - 1 maintainer
@yagyeshvyas/vibeguard 1.3.0 π°
Security scanner + AI agent firewall. Blocks secret/PII exfiltration in real time. 752 rules, 82 ...7 versions - Latest release: 3 months ago - 1.2 thousand downloads last month - 7 stars on GitHub - 1 maintainer
vice-security 3.5.0 π°
VICE - Vulnerability Inspector & Code Examiner | Black-box & white-box security auditor for web a...11 versions - Latest release: 29 days ago - 2.25 thousand downloads last month - 599 stars on GitHub - 1 maintainer
@lowdep/depwarden 1.0.8 π°
DepWarden CLI β scan your npm/yarn/pnpm project for supply chain vulnerabilities7 versions - Latest release: 2 months ago - 0 stars on GitHub - 1 maintainer
@cairnsec/opf-tools 0.2.1
Converters between the Open Pentest Format (OPF) and SARIF, DefectDojo, Jira, GitHub, GitLab, Lin...5 versions - Latest release: 2 months ago - 412 downloads last month - 0 stars on GitHub - 1 maintainer
Top 7.2% on npmjs.org
109 versions - Latest release: over 7 years ago - 4 dependent packages - 1 dependent repositories - 173 downloads last month - 2,765 stars on GitHub - 4 maintainers
@bearer/package-init 0.116.1
[](https://oclif.io) [ server for SPHIOR CODE β surface security findings from you...13 versions - Latest release: 3 days ago - 182 downloads last month - 1 stars on GitHub - 1 maintainer
eslint-plugin-mongodb-security 9.1.6 π°
ESLint plugin for MongoDB and Mongoose security β detects NoSQL operator injection, unsafe querie...29 versions - Latest release: 3 days ago - 5.89 thousand downloads last month - 19 stars on GitHub - 1 maintainer
opencode-vigia 0.1.0
OpenCode plugin that helps web developers find, prove, and fix vulnerabilities with open weights ...2 versions - Latest release: 3 days ago - 1 maintainer
eslint-plugin-knex-security 1.0.1 π°
ESLint plugin for knex β detects SQL injection in raw queries built with string concatenation or ...16 versions - Latest release: 3 days ago - 3.08 thousand downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-sequelize-security 1.0.1 π°
ESLint plugin for the Sequelize ORM β detects SQL injection in raw sequelize.query() and Sequeliz...16 versions - Latest release: 3 days ago - 1.06 thousand downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-typeorm-security 1.0.1 π°
ESLint plugin for typeorm β detects SQL injection in raw queries built with string concatenation ...15 versions - Latest release: 3 days ago - 1.81 thousand downloads last month - 19 stars on GitHub - 1 maintainer
@4da/mcp-server 6.2.4
Upgrade intelligence for AI coding agents: what changes between your installed and target version...30 versions - Latest release: 11 days ago - 1.5 thousand downloads last month - 0 stars on GitHub - 1 maintainer
vetguard 0.3.0
Local-first scanner for AI-era npm supply-chain threats: hallucinated (slopsquatted) dependencies...4 versions - Latest release: 3 months ago - 0 stars on GitHub - 1 maintainer
claude-security 0.1.1
Claude-powered security scanning: CLI and TypeScript SDK that drives the Claude Agent SDK through...2 versions - Latest release: 3 months ago - 0 stars on GitHub - 1 maintainer
@arcane-spark/ubel-node 0.23.0
Software supply-chain and source-code security for Node.js. SCA: resolves dependencies, scans via...36 versions - Latest release: 3 days ago - 2.49 thousand downloads last month - 4 stars on GitHub - 1 maintainer
eslint-plugin-mcp-sdk-security 1.0.1 π°
ESLint plugin for Model Context Protocol (MCP) SDK security β follows tool arguments into shells,...15 versions - Latest release: 3 days ago - 2.52 thousand downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-postgresql-security 2.6.3 π°
ESLint plugin for the pg PostgreSQL driver β detects SQL injection, unreleased clients, floating ...20 versions - Latest release: 3 days ago - 990 downloads last month - 19 stars on GitHub - 1 maintainer
eslint-plugin-jwt-security 3.5.3 π°
ESLint plugin for JWT security β detects algorithm confusion (CVE-2022-23540), alg:none, weak or ...21 versions - Latest release: 3 days ago - 3.32 thousand downloads last month - 19 stars on GitHub - 1 maintainer
w-scan-vulnerability 1.0.3
A scanner for vulnerabilities in nodejs.4 versions - Latest release: 4 days ago - 452 downloads last month - 0 stars on GitHub - 1 maintainer
@roshcompanylabs/cra-kit 0.1.0
Turn an npm repo into the EU Cyber Resilience Act evidence the free SBOM tools don't produce: SBO...2 versions - Latest release: 4 days ago - 0 stars on GitHub - 1 maintainer
w-scan-dep 1.0.8
A scanner for dependencies in nodejs.9 versions - Latest release: 4 days ago - 600 downloads last month - 0 stars on GitHub - 1 maintainer
argus-codescan 0.5.1
Security scanner for React, Next.js & Node β SCA, SAST, secrets. CSV reports. For malware/ML/SARI...9 versions - Latest release: 13 days ago - 11 stars on GitHub - 1 maintainer
vettcode-cli 3.0.7
CLI version of VettCode - AI-powered codebase security and quality scanner44 versions - Latest release: 3 months ago - 1 stars on GitHub - 1 maintainer
arhus-cli 0.4.0
local-first security analysis for TypeScript & JavaScript14 versions - Latest release: 2 months ago - 432 downloads last month - 9 stars on GitHub - 1 maintainer
safeey-cli 0.7.0
Scan your source code for security vulnerabilities β a Safeey product by Noohra Innovate Ltd.6 versions - Latest release: 3 months ago - 246 downloads last month - 1 maintainer
Related Keywords
security
1,513
audit
946
supply-chain
819
npm-audit
753
scan
738
trust-score
732
pkgtrust
730
npm-security
728
risk
723
risk-assessment
723
security-report
722
standard
718
scanner
316
cli
236
mcp
195
npm
154
sast
147
static-analysis
127
cve
125
ai
125
owasp
123
devsecops
114
model-context-protocol
102
typescript
88
dependencies
86
claude
82
appsec
66
osv
63
cursor
62
javascript
61
nodejs
61
cwe
56
sbom
55
ai-security
54
mcp-server
52
vulnerability-scanner
51
code-quality
51
pentest
49
dependency
48
compliance
47
claude-code
46
secrets
45
sca
43
cybersecurity
42
xss
42
llm
42
sarif
40
code-analysis
39
bun
36
security-audit
36
security-scanner
36
eslint-plugin
36
linter
35
penetration-testing
35
security-tools
35
malware
33
supply-chain-security
33
pnpm
32
ai-agents
32
ai-agent
31
yarn
31
code-review
31
eslint
30
sql-injection
28
secure-coding
28
devops
27
eslintplugin
27
vulnerabilities
27
typosquatting
26
linting
26
oxlint
26
github
26
a11y
25
developer-tools
25
react
25
analysis
25
interlace-security
24
prompt-injection
24
vibe-coding
22
nvd
22
node
22
agent
21
ast
21
cyclonedx
21
dependency-scanning
20
exploit
20
ai-assistant
20
llm-optimized
20
pentesting
20
automation
20
github-action
20
github-actions
20
nextjs
19
ci
19
solidity
19
semgrep
19
outdated
18
windsurf
18
anthropic
18
dast
18