npm solutions
These are the security products focused on npm, pulled from every category so you can compare them in one place. Filter by category or pricing to narrow the list.
34 products tagged npm.
Featured on CybersecTools
Package firewall that blocks malicious and vulnerable open-source packages before install
SCA that tracks dependency CVEs, checks reachability, and opens upgrade PRs
Client-side tool to check npm projects for Shai Hulud 2.0 supply chain compromise.
Suite of web security tools, platforms, and open-source frameworks.
Detects and blocks malicious/vulnerable open source packages in supply chains.
Tool for searching, comparing, and evaluating open source dependencies.
Scans public internet for leaked cloud service keys and verifies them
Bot defense platform protecting websites, mobile apps, and APIs from attacks
Agent-based server security monitoring with vulnerability and compliance scanning
Malware-resistant software libraries rebuilt from source for multiple languages
Software supply chain security platform detecting malware in dependencies
Scans repositories for exposed secrets, API keys, and credentials for bug bounty
A secret scanning tool that examines NPM modules and ZIP files for exposed credentials and sensitive information using nuclei templates.
A collection of CLI tools and API utilities for searching and filtering GitHub repositories by various criteria including keywords, users, organizations, and repository attributes.
Reverts sha1 integrity back to sha512 in lock files for enhanced security.
A dependency security scanner that identifies potential supply chain vulnerabilities by checking for available package namespace registrations across Python, JavaScript, PHP, and Maven repositories.
Package verification tool for npm with various verification and testing capabilities.
npm-zoo is a curated database of known malicious NPM packages that helps developers and security researchers identify and avoid potentially harmful dependencies in their projects.
An extensible, heuristic-based vulnerability scanning tool for installed npm packages.
A tool to run YARA rules against node_module folders to identify suspicious scripts
UglifyJS 3 is a JavaScript toolkit that provides parsing, minification, compression, and beautification capabilities for JavaScript code optimization and processing.
A tool that safely installs packages with npm/yarn by auditing them as part of your install process.
Lint lockfiles for improved security and trust policies.
A Node.js middleware module that automatically enforces HTTPS connections by redirecting HTTP requests to HTTPS URLs in Express.js applications.
