Package Scanner

Detect known malware, known vulnerabilities, and suspicious metadata signals in your npm dependencies — all in one scan

package-scanner
$ scanning 847 dependencies…
✓ Malware database checked
✓ OSV vulnerabilities queried
✓ Metadata signals analyzed
All clear — 0 threats detected

Why Choose PackageScanner?

Malware Detection

Instantly identify known malicious packages in your direct and transitive dependencies using a comprehensive threat database

Vulnerability Scan

Check every dependency against the OSV database for published CVEs and security advisories, with severity and fix version info

Metadata Risk

Surface suspicious indicators — stale or brand-new releases, missing licenses, and possible typosquatting — so you can review before shipping