Security●●Solid
Scanner to check if you are affected by the axios supply chain attack
Forensic triage CLI with verdict system for axios IOC detection.
Solve My ProblemShip It
aeneas_ory
202mo ago
Back to browse
Lateos/NPM-scan – open-source NPM supply chain scanner, v0.18.3
by lateos-ai·Jun 2, 2026·1 point·0 comments
AI Analysis
●MidShip It
NPM supply chain scanner competing against Socket, Snyk, and npm audit.
Strengths
- •v0.18.3 version suggests active iteration and real implementation.
- •Open-source approach contrasts with commercial security scanning tools.
Weaknesses
- •Landing page behind Cloudflare verification prevents evaluating actual features.
- •No clear differentiation from established npm audit and Socket.dev.
Category
Target Audience
JavaScript developers and security teams auditing dependencies
Similar To
Socket · Snyk · npm audit
Similar Projects
Security●●●Banger
Pipguard – pre-install malware scanner for Python supply-chain attacks
Behavioral malware scanning before install, unlike pip-audit.
Solve My Problem
secondmod
202mo ago
Security●Mid
Package Proxy
Yet another package proxy when Sonatype, Verdaccio, and Cloudsmith already own this space.
Ship It
mslaviero
207d ago
Security●●Solid
Pytest tests catching Python supply chain attacks (litellm .pth vector)
Catches .pth injection vectors from the litellm attack when Snyk and Dependabot miss them.
Dark HorseSolve My Problem
qualitymax
202mo ago
Security●Mid
Pqurp – Quarantine Window for Packages to Prevent Supply Chain Attacks
Speculative protocol for package quarantine without a reference implementation or registry buy-in.
Bold Bet
exec7
501mo ago
Security●●Solid
DepsGuard – one command to harden NPM/pnpm/yarn/bun/uv configs
One command hardens five package managers when hand-editing configs gets ignored.
Solve My ProblemWizardry
eranation
40611d ago