lateos-ai/npm-scan
View on GitHub ↗ ★ 19 JavaScript
Modern supply chain security for the npm ecosystem. Static + behavioral analysis that catches what npm audit, Snyk, and Socket miss — obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation.
5 mentions on Hacker News by 1 person: 4 stories, 1 comment · first 2026-05-13 · latest 2026-06-05
20082026
-
▲ 1
Lateos/NPM-scan v1.2.0: Detecting Native Addon Malware (node-gyp Abuse)story by lateos-ai · 2026-06-05 · 1 comment
-
▲ 2
NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply Chain Attacksstory by lateos-ai · 2026-06-05 · 1 comment
-
▲ 9
Npm-scan: Modern supply chain security for the npm ecosystemstory by lateos-ai · 2026-06-01 · 0 comments
-
…. The npm readme page is at https://www.npmjs.com/package/@lateos/npm-scan and open spruce is at https://github.com/lateos-ai/npm-scan . I appreciate all input and feedback
comment by lateos-ai · 2026-05-13 · in Ask HN: What are you working on (non-AI)? -
▲ 2
NPM-Scan – Detects TanStack Worm, Beats Socket/Snyk (Local/BYOC)story by lateos-ai · 2026-05-13 · 0 comments