npmjs.org "vulnerability" keyword
levitate 0.1.0
Levitate is an exploit development platform1 version - Latest release: about 13 years ago - 1 dependent package - 1 dependent repositories - 12 downloads last month - 7 stars on GitHub - 1 maintainer
@4da/mcp-server 6.2.6
Upgrade intelligence for AI coding agents: what changes between your installed and target version...32 versions - Latest release: about 8 hours ago - 2.65 thousand downloads last month - 0 stars on GitHub - 1 maintainer
pi-security-analysis 0.17.3
Deep vulnerability scanning of your own code, run entirely inside your Pi session at a chosen eff...5 versions - Latest release: 27 days ago - 501 downloads last month - 0 stars on GitHub - 1 maintainer
foxguard 0.14.1
A security scanner as fast as a linter, written in Rust. 200+ built-in rules across 12 source lan...25 versions - Latest release: 12 days ago - 1.99 thousand downloads last month - 305 stars on GitHub - 1 maintainer
penthera 2.1.0 💰
Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, imp...18 versions - Latest release: 1 day ago - 2.12 thousand downloads last month - 71 stars on GitHub - 1 maintainer
cve-scanner 0.3.8
[](https://www.npmjs.com/pa...20 versions - Latest release: about 12 hours ago - 2.22 thousand downloads last month - 0 stars on GitHub - 1 maintainer
sentinello 3.8.1
Scan the projects in a folder for vulnerable dependencies and write an advisory an agent can act on.22 versions - Latest release: about 15 hours ago - 1.4 thousand downloads last month - 8 stars on GitHub - 1 maintainer
@cyberhub/trust-ldapjs-dn 1.0.0
Security Trust Report: @ldapjs/dn@1.1.0 — 64/100 (C+, standard). Maintainer risk, supply chain an...1 version - Latest release: 6 months ago - 1 maintainer
@nebusec/nebu 1.0.15
NebuSec Platform security scanner CLI — run scans and query findings from the command line.6 versions - Latest release: about 21 hours ago - 275 downloads last month - 2 maintainers
@cyanheads/osv-advisory-mcp-server 0.4.0 💰
Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory ...20 versions - Latest release: about 22 hours ago - 1.13 thousand downloads last month - 2 stars on GitHub - 1 maintainer
@cyanheads/mitre-cwe-mcp-server 0.2.0 💰
Explore MITRE CWE weaknesses and CAPEC attack patterns, mitigations, code examples, and mappings ...6 versions - Latest release: about 22 hours ago - 0 stars on GitHub - 1 maintainer
@jieai/dsh-plugin-vet 0.4.2
Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-...34 versions - Latest release: about 22 hours ago - 2.53 thousand downloads last month - 3 stars on GitHub - 1 maintainer
vulnogram 0.1.0-rc1
Making the world safer one CVE at a time, since 2017. Tool for creating Security Advisories and C...1 version - Latest release: about 4 years ago - 1 dependent package - 27 downloads last month - 249 stars on GitHub - 1 maintainer
break-anything 0.25.0
One CLI and MCP server for coding agents to find vulnerabilities across code, dependencies, apps,...26 versions - Latest release: about 23 hours ago - 2.37 thousand downloads last month - 0 stars on GitHub - 1 maintainer
guardvibe 3.67.0 💰
Security infrastructure your AI can't be — deterministic, current past your model's training cuto...242 versions - Latest release: 1 day ago - 11.8 thousand downloads last month - 6 stars on GitHub - 1 maintainer
Top 4.7% on npmjs.org
2 versions - Latest release: over 4 years ago - 3 dependent packages - 20 dependent repositories - 95 thousand downloads last month - 12 stars on GitHub - 1 maintainer
vuln-vects 1.1.0
A powerful, flexible CVSS parser, calculator and validator written for JavaScript/TypeScript.2 versions - Latest release: over 4 years ago - 3 dependent packages - 20 dependent repositories - 95 thousand downloads last month - 12 stars on GitHub - 1 maintainer
dependabot-risk 1.0.1
Not an npm package — this name points at the Dependabot Risk Report GitHub Action. See the reposi...2 versions - Latest release: 1 day ago - 36 downloads last month - 0 stars on GitHub - 1 maintainer
ecr-scan-verifier 0.2.2 💰
Verify ECR image scan findings during CDK deployment23 versions - Latest release: 8 days ago - 428 downloads last month - 8 stars on GitHub - 1 maintainer
@cyberhub/trust-lru-queue 1.0.0
Security Trust Report: lru-queue@0.1.0 — 64/100 (C+, standard). Maintainer risk, supply chain ana...1 version - Latest release: 7 months ago - 1 maintainer
contrastapi 1.6.0 💰
Official Node.js SDK for ContrastAPI — security intelligence for developers and AI agents8 versions - Latest release: 4 months ago - 63 downloads last month - 35 stars on GitHub - 1 maintainer
exploitsearch 2.0.3 deprecated
A library for accessing ExploitSearch.net API, http://www.exploitsearch.net/26 versions - Latest release: over 9 years ago - 2 dependent packages - 6 dependent repositories - 14 downloads last month - 5 stars on GitHub - 1 maintainer
x402-vuln 0.0.2
Vulnerability detection MCP - CVE lookup and dependency vulnerability scanning via x4023 versions - Latest release: 1 day ago - 1 maintainer
x402-scan-audit 0.0.2
Code audit MCP - dependency vulnerability audit via x4023 versions - Latest release: 1 day ago - 1 maintainer
@trustify-da/trustify-da-javascript-client 0.4.0
Code-Ready Dependency Analytics JavaScript API.184 versions - Latest release: 22 days ago - 2.89 thousand downloads last month - 2 stars on GitHub - 4 maintainers
@kubbisec/mcp 0.1.15
KubbiSec MCP server — projects, vulnerabilities, AI remediation, and Naus CI helpers14 versions - Latest release: about 2 months ago - 1.99 thousand downloads last month - 1 maintainer
@patchstack/connect 0.5.75
Runtime application security for JavaScript and Node.js: dependency inventory, attack-surface map...117 versions - Latest release: 2 days ago - 7.3 thousand downloads last month - 1 stars on GitHub - 1 maintainer
cwe-tool 1.4.2 💰
A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.24 versions - Latest release: about 2 years ago - 1 dependent package - 144 downloads last month - 65 stars on GitHub - 2 maintainers
Top 5.8% on npmjs.org
26 versions - Latest release: about 2 years ago - 3 dependent packages - 2 dependent repositories - 727 downloads last month - 32 stars on GitHub - 2 maintainers
cwe-sdk 1.1.19 💰
A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC26 versions - Latest release: about 2 years ago - 3 dependent packages - 2 dependent repositories - 727 downloads last month - 32 stars on GitHub - 2 maintainers
opencode-vigia 0.1.1 💰
OpenCode plugin that helps web developers find, prove, and fix vulnerabilities with open weights ...3 versions - Latest release: 11 days ago - 1 stars on GitHub - 1 maintainer
@insaidermobile-ux/pi-security-review 0.2.1
Security review for pi. Read-only agents find vulnerabilities, separate agents challenge each att...6 versions - Latest release: 2 days ago - 0 stars on GitHub - 1 maintainer
@cyanheads/first-epss-mcp-server 0.2.0 💰
Look up FIRST EPSS exploitation scores and daily history, find CVEs by score threshold, and prior...5 versions - Latest release: 2 days ago - 0 stars on GitHub - 1 maintainer
osv-scanner-mcp 0.21.2
MCP server that wraps Google's OSV-Scanner to scan Java, JavaScript, Python, Go, Rust, .NET, and ...44 versions - Latest release: 2 days ago - 4.43 thousand downloads last month - 0 stars on GitHub - 1 maintainer
certfr-loader 2.0.6 removed
Module to load certfr from the CERT FR29 versions - Latest release: about 8 years ago - 1 dependent package - 1 dependent repositories - 60 downloads last month - 0 stars on GitHub - 1 maintainer
cognium-dev 4.17.0 💰
Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking218 versions - Latest release: 12 days ago - 3.55 thousand downloads last month - 5 stars on GitHub - 2 maintainers
cognium 1.8.3 💰
Semantic static analysis engine for detecting security vulnerabilities via taint tracking38 versions - Latest release: 5 months ago - 299 downloads last month - 8 stars on GitHub - 2 maintainers
cognium-ai 4.22.0
AI-powered static analysis CLI with LLM-enhanced vulnerability detection271 versions - Latest release: 13 days ago - 3.2 thousand downloads last month - 2 maintainers
@paretools/security 0.23.3 💰
MCP server for security scanning — structured Trivy, Semgrep, and Gitleaks findings for AI agents34 versions - Latest release: 12 days ago - 133 downloads last month - 139 stars on GitHub - 1 maintainer
herozion 2.0.17
Security audit and performance analysis CLI tool for developers109 versions - Latest release: 3 days ago - 2.98 thousand downloads last month - 1 maintainer
polyver 0.1.1
Compare package versions and evaluate VERS version ranges across ecosystems: npm, PyPI, Debian, R...3 versions - Latest release: 4 days ago - 418 downloads last month - 1 maintainer
@quantumtiger/qv 4.0.0
Quantum Viper CLI (qv) - Professional AI-Powered Security Analysis1 version - Latest release: 7 months ago - 29 downloads last month - 1 maintainer
dsh-plugin-cvescout 0.1.1
DeepSeek Harness plugin for CVE impact retesting: fingerprint a target, judge it against a CVE's ...2 versions - Latest release: about 2 months ago - 0 stars on GitHub - 1 maintainer
xploitscan 1.18.16 💰
AI security scanner for vibe-coded apps. Find vulnerabilities before attackers do.89 versions - Latest release: 3 days ago - 5.39 thousand downloads last month - 1 maintainer
pulsesec-cli 0.0.7
PulseSec CLI Agent - AI-Powered DAST Security Testing Tool for APIs6 versions - Latest release: 9 months ago - 75 downloads last month - 1 maintainer
xploitscan-shared-rules 2.4.20 💰
Shared XploitScan rule definitions, helpers, compliance mappings, the AI false-positive filter, a...95 versions - Latest release: 3 days ago - 4.83 thousand downloads last month - 1 maintainer
@cyberhub/trust-arcadialdev-arcality 1.0.6
Security Trust Report: @arcadialdev/arcality@2.4.36 — 65/100 (B, standard). Maintainer risk, supp...7 versions - Latest release: 6 months ago - 1 maintainer
@cyberhub/trust-react-dom.js 1.0.0
Security Trust Report: react-dom.js@0.0.1-security — 64/100 (C+, standard). 1 vulnerability found...1 version - Latest release: 7 months ago - 1 maintainer
@mrfentmen/epss-mcp 1.0.1
Exploit Prediction Scoring System scores: how likely a CVE will be exploited in the next 30 days ...3 versions - Latest release: 3 days ago - 0 stars on GitHub - 1 maintainer
@thefaultvault/tfv-nvd-types 1.3.0
National Vulnerability Database typescript definitions for data feeds.4 versions - Latest release: almost 7 years ago - 2 dependent packages - 1 dependent repositories - 236 downloads last month - 0 stars on GitHub - 1 maintainer
@arcane-spark/ubel-node 0.24.0
Software supply-chain and source-code security for Node.js. SCA: resolves dependencies, scans via...37 versions - Latest release: 3 days ago - 1.36 thousand downloads last month - 4 stars on GitHub - 1 maintainer
osv-mcp 1.0.2
Use this MCP server to OSV open source vulnerability data and package security checks. Tools incl...3 versions - Latest release: 12 days ago - 0 stars on GitHub - 1 maintainer
oxlint-plugin-openai-security 1.1.0 💰
The openai-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-openai-s...3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-nestjs-security 3.2.0 💰
The nestjs-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-nestjs-s...3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
@sooho/cli 0.3.4
CLI tool to interact with SOOHO10 versions - Latest release: over 6 years ago - 1 dependent package - 1 dependent repositories - 26 downloads last month - 40 stars on GitHub - 3 maintainers
@sooho/advisory-db 0.3.4
A community-driven vulnerability database of smart contract2 versions - Latest release: over 6 years ago - 2 dependent packages - 1 dependent repositories - 10 downloads last month - 40 stars on GitHub - 3 maintainers
@softwaresecurednpm/npm_plugin 1.0.31
Dependency checker and issue reporter38 versions - Latest release: almost 8 years ago - 1 dependent package - 38 downloads last month - 1 stars on GitHub - 1 maintainer
oxlint-plugin-mysql-security 1.1.0 💰
The mysql-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-mysql-sec...3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
vice-security 3.5.0 💰
VICE - Vulnerability Inspector & Code Examiner | Black-box & white-box security auditor for web a...11 versions - Latest release: about 1 month ago - 2.25 thousand downloads last month - 600 stars on GitHub - 1 maintainer
oxlint-plugin-supabase-security 1.1.0 💰
The supabase-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-supaba...3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-anthropic-security 1.1.0 💰
The anthropic-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-anthr...3 versions - Latest release: 4 days ago - 0 downloads last month - 18 stars on GitHub - 1 maintainer
oxlint-plugin-mcp-sdk-security 1.1.0 💰
The mcp-sdk-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-mcp-sdk...3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
Top 9.1% on npmjs.org
101 versions - Latest release: over 7 years ago - 4 dependent packages - 1 dependent repositories - 434 downloads last month - 2,774 stars on GitHub - 4 maintainers
@bearer/tsconfig 0.116.1
Bearer TSconfig base101 versions - Latest release: over 7 years ago - 4 dependent packages - 1 dependent repositories - 434 downloads last month - 2,774 stars on GitHub - 4 maintainers
Top 7.2% on npmjs.org
109 versions - Latest release: over 7 years ago - 4 dependent packages - 1 dependent repositories - 694 downloads last month - 2,774 stars on GitHub - 4 maintainers
@bearer/package-init 0.116.1
[](https://oclif.io) [ binary for recheck.5 versions - Latest release: 5 days ago - 82 thousand downloads last month - 301 stars on GitHub - 1 maintainer
oxlint-plugin-sqlite-security 1.1.0 💰
The sqlite-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-sqlite-s...3 versions - Latest release: 4 days ago - 0 downloads last month - 18 stars on GitHub - 1 maintainer
oxlint-plugin-express-security 3.3.0 💰
The express-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-express...3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
Top 7.0% on npmjs.org
24 versions - Latest release: 5 days ago - 1 dependent package - 35 dependent repositories - 675 thousand downloads last month - 301 stars on GitHub - 1 maintainer
recheck-jar 4.6.2 💰
The JAR archive for recheck.24 versions - Latest release: 5 days ago - 1 dependent package - 35 dependent repositories - 675 thousand downloads last month - 301 stars on GitHub - 1 maintainer
oxlint-plugin-drizzle-security 1.1.0 💰
The drizzle-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-drizzle...3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-lambda-security 2.2.0 💰
The lambda-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-lambda-s...3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-mongodb-security 9.2.0 💰
The mongodb-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-mongodb...3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
agentgg 0.1.28
Agentic SAST scanner — white box, CI-ready, multi-provider. Reasoning where regex falls short.29 versions - Latest release: 4 days ago - 2.02 thousand downloads last month - 442 stars on GitHub - 1 maintainer
oxlint-plugin-prisma-security 1.1.0 💰
The prisma-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-prisma-s...3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
oxlint-plugin-secure-coding 5.5.0 💰
The secure-coding rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-secure-cod...3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
recheck-macos-arm64 4.6.2 💰
The macOS 64-bit (ARM) binary for recheck.10 versions - Latest release: 5 days ago - 88.6 thousand downloads last month - 301 stars on GitHub - 1 maintainer
Top 7.0% on npmjs.org
28 versions - Latest release: 5 days ago - 1 dependent package - 39 dependent repositories - 2.32 million downloads last month - 301 stars on GitHub - 1 maintainer
recheck-linux-x64 4.6.2 💰
The Linux 64-bit binary for recheck.28 versions - Latest release: 5 days ago - 1 dependent package - 39 dependent repositories - 2.32 million downloads last month - 301 stars on GitHub - 1 maintainer
oxlint-plugin-gemini-security 1.1.0 💰
The gemini-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-gemini-s...3 versions - Latest release: 4 days ago - 18 stars on GitHub - 1 maintainer
nsauditor-ai 1.1.0
Modular AI-assisted network security audit platform — Community Edition152 versions - Latest release: 4 days ago - 6.65 thousand downloads last month - 23 stars on GitHub - 1 maintainer
oxlint-plugin-browser-security 2.2.0 💰
The browser-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-browser...3 versions - Latest release: 4 days ago - 0 downloads last month - 18 stars on GitHub - 1 maintainer
oxlint-plugin-knex-security 1.1.0 💰
The knex-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-knex-secur...3 versions - Latest release: 4 days ago - 0 downloads last month - 18 stars on GitHub - 1 maintainer
@kabirkhanuja/siteshield 0.1.0
Audit a live website and the source code behind it in one pass: security headers, TLS, DNS, secre...2 versions - Latest release: 4 days ago - 1 maintainer
@secureport/cli 0.10.1
Turn any scanner's output into a client-ready security report. Works entirely offline, with no ac...15 versions - Latest release: 8 days ago - 0 downloads last month - 1 maintainer
@secureport/sdk 0.14.1
Typed client for the Secureport hosted API.12 versions - Latest release: 4 days ago - 0 downloads last month - 1 maintainer
@secureport/core 4.2.1
Shared domain model for Secureport. Imported by the hosted API the same way a third party would.21 versions - Latest release: 4 days ago - 0 downloads last month - 1 maintainer
@reshiftsecurity/reshift-plugin-npm 2.0.2
Security vulnerability scanner11 versions - Latest release: about 5 years ago - 1 dependent package - 31 downloads last month - 1 stars on GitHub - 2 maintainers
soft-awake 1.0.2
Advanced NPM Package Security Analysis Tool with AI-Powered Intelligence3 versions - Latest release: about 1 year ago - 32 downloads last month - 3 stars on GitHub - 1 maintainer
@passmarked/ssl 1.0.10
Rules that relate to checking the SSL configuration of each individual resolved server from the d...10 versions - Latest release: over 8 years ago - 2 dependent packages - 1 dependent repositories - 142 downloads last month - 7 stars on GitHub - 1 maintainer
securewithtrace 0.55.0
Official Trace CLI for vulnerability intelligence in your terminal77 versions - Latest release: 4 days ago - 634 downloads last month - 1 maintainer
Related Keywords
security
1,541
audit
947
supply-chain
818
npm-audit
753
scan
738
trust-score
732
pkgtrust
730
npm-security
728
risk-assessment
723
risk
723
security-report
722
standard
718
scanner
317
cli
238
mcp
203
sast
171
npm
154
static-analysis
149
owasp
146
cve
131
ai
125
devsecops
123
typescript
111
model-context-protocol
107
appsec
89
dependencies
87
claude
84
cwe
78
code-quality
73
nodejs
73
javascript
70
ai-security
65
osv
65
cursor
62
sbom
57
mcp-server
55
eslint
52
vulnerability-scanner
51
pentest
49
linting
48
dependency
48
oxlint
48
compliance
48
llm
47
secrets
47
claude-code
46
interlace-security
46
sca
45
eslint-plugin
45
linter
44
xss
43
cybersecurity
42
sarif
40
code-analysis
39
security-scanner
38
llm-optimized
37
bun
37
ai-assistant
37
secure-coding
37
security-audit
36
sql-injection
36
penetration-testing
35
security-tools
35
supply-chain-security
34
a11y
34
malware
33
ai-agents
33
pnpm
32
yarn
31
code-review
31
ai-agent
31
devops
27
vulnerabilities
27
eslintplugin
27
prompt-injection
26
node
26
github
26
react
25
analysis
25
typosquatting
25
developer-tools
25
vibe-coding
23
cyclonedx
23
nvd
23
ast
22
agent
22
oxlint-plugin
22
vite-plus
22
llm-security
21
exploit
21
postgres
21
auto-fix
20
pentesting
20
redos
20
github-action
20
ci
20
dependency-scanning
20
github-actions
20
automation
20
database
20