Upload Project Files for Analysis

Upload your package.json or lockfile to scan for known malicious packages.

Tips: Metadata checks for publish dates and licenses

Enable metadata checks after uploading package.json to review publish dates and license signals alongside malware results. Lockfiles are not supported.

Drag and drop your package.json or lockfile

Supports package-lock.json, yarn.lock, pnpm-lock.yaml, bun.lock, package.json

Maximum file size: 50MB