npm-postinstall-attack-scanner
Plugin-Paket · aliksir
npm-postinstall-attack-scanner ist ein Plugin-Paket für KI-Coding-Tools von aliksir. Marktplätze, die wir lesen und die es listen: 1 (Claude Code: claude-plugins-community). Wir haben es erstmals am 2026-10-11 gesehen und seither keine Änderung erfasst. Stand unseres Marktplatz-Durchlaufs vom 2026-10-12.
Detect npm supply chain attacks that use the postinstall + hidden dependency pattern to deliver malware. Built in response to the axios maintainer account takeover (2026-03-31). Scans lockfiles, ode_modules, postinstall scripts, version ranges, and npm cache across 5 phases. Returns actionable remediation steps when issues are found.
- Marktplätze
- 1
- Wo es läuft
- Wird als Plugin-Paket installiert
- Größte veröffentlichte Zahl
- 1 Sterne (GitHub) · Claude Code: claude-plugins-community
- Erstmals gesehen
- 2026-10-11
- Letzte Änderung
- Keine erfasst
- Verifiziert-Markierung
- Nicht markiert
Wo es veröffentlicht ist
| Marktplatz | Status | Version | Zahlen | Verifiziert | Erstmals gesehen |
|---|---|---|---|---|---|
| Claude Code: claude-plugins-community (Quelle auf GitHub öffnen) | Gelistet | 0.1.0 | Forks (GitHub): 0 Sterne (GitHub): 1 |
Nicht markiert |
Jede Zahl stammt vom jeweiligen Marktplatz und wird nie über Marktplätze hinweg addiert. Ein Marktplatz ohne veröffentlichte Zahl zeigt keine: keine Zahl ist nicht null.
Was es kann
Wird als Plugin-Paket im KI-Tool installiert; was es startet, steht unten.
Keiner der Marktplätze, die wir lesen, veröffentlicht seine Tools oder die abgefragten Einstellungen.
Was sich geändert hat
Bei diesem Plugin hat sich nichts bewegt, seit wir es beobachten.
Der Herausgeber
aliksir · Repository: github.com/aliksir/npm-postinstall-attack-scanner
Ähnliche Plugins
Produkte, deren eigene Namen, Beschreibungen, Werkzeuge und Skills diesem der Bedeutung nach am nächsten sind, auf allen Marktplätzen, die wir lesen. Die Nähe ist nur innerhalb dieser Liste geordnet.
- npm Supply Chain AuditCheck npm packages for typosquats, hallucinated names, install scripts and risky new releases.
- NPMScanDetect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
- pkgproofVerify an npm package before install: advisories, install scripts, typosquats, declared repository.
- npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcpAdvanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
- DepScoutScan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
- dx-guardDependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and malicious code before installation using…
- pkgxrayPre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
- Jeevesus — DugganUSA Threat Intelligence MCPcheck-package: block malicious npm/PyPI deps before your AI agent installs them. Free, no key.
- Package Health CheckCheck an npm or Python package, or a package.json, for vulnerabilities and upkeep.
- latio-secure-supply-chain-skillsAudit and take action to secure your repository against supply chain misconfigurations and malware.
Ähnliche Plugins nach Marktplatz
Dieselbe Frage an jeden Marktplatz einzeln: Gibt es dort ein Gegenstück zu diesem Plugin?
Gelistet auf Claude Code: claude-plugins-community (5)
- dx-guardDependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and malicious code before installation using…
- latio-secure-supply-chain-skillsAudit and take action to secure your repository against supply chain misconfigurations and malware.
- dependency-evaluatorEvaluate npm and Python packages before adding them as dependencies. Automatically gathers package metadata, analyzes source complexity, checks security and maintenance health…
- Endor Labs Agent KitSet up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
- claude-code-vulnerability-checkDetect CVE (Common Vulnerability Exposure) in PHP / JS project. Auto apply minor fixes and patch Alert on necessity of major update (prevent breaking changes)
Gelistet auf Claude Code: claude-plugins-official (5)
- Endor Labs Agent KitSet up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
- sonatype-guideSonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check…
- Semgrep GuardianSemgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
- claude-securityDeep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the…
- security-guidanceSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
Gelistet auf Claude: knowledge-work-plugins (5)
- security-guidanceSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
- stackhawk-hawkscanConfigure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
- vantaThe Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
- stackhawk-apiQuery the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
- QodoBring Qodo's codebase intelligence, coding standards, and code review into your coding agent.
Gelistet auf Codex: openai-curated (openai/plugins) (5)
- Codex SecurityCodex Security workflows for security scans, analysis, and investigation.
- crowdstrike-falcon-foundryCrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
- crowdstrike-falcon-fusionCrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
- GitHubInspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
- SentryInspect recent issues and events in Sentry from Codex.
Gelistet auf Community GitHub marketplaces (5)
- aikidoAikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
- 42crunch-api-security-testingAutomate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including…
- 4da-mcp-server io.github.4DA-Systems/4da-mcp-serverUpgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.
- sourcery-agentSourcery security findings for AI coding agents: triage and minimal-change remediation via the public Sourcery API (12 MCP tools + skills).
- cybersec-toolkit io.github.26zl/cybersec-toolkitAuthorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.
Gelistet auf Copilot CLI: github/awesome-copilot (5)
- dependabot-triageTriage Dependabot alerts and recommend safe, evidence-based dependency updates.
- tiny-tool-town-submitterInspect a repository, improve Tiny Tool Town readiness, submit its listing issue, and launch remediation work.
- sonarqubeAutomatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…
- cast-imagingA comprehensive collection of specialized agents for software analysis, impact assessment, structural quality advisories, and architectural review using CAST Imaging.
- crowdstrike-falcon-foundryCrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
Gelistet auf Copilot CLI: github/copilot-plugins (5)
- advanced-securityAdvanced Security plugin for GitHub Copilot.
- azure-devops-copilot-pluginBring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
- microsoft-365-agents-toolkitToolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
- code-apps-previewBuild and deploy Power Apps code apps using React, Vite, and Power Platform connectors.
- mobile-appBuild and deploy Power Apps code apps for mobile using Expo (React Native), with native device functionality and Power Platform connectors
Gelistet auf Cursor: cursor/plugins (5)
- Agent CompatibilityCLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
- Create PluginScaffold and validate new agent plugins.
- pstackif you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
- Cursor SDKBuild apps, scripts, and automations with the TypeScript SDK.
- ThermosThermo-nuclear branch review: deep security/correctness audits, harsh code-quality rubrics, parallel subagents, thermos orchestration, and optional merge-ready PR flows.
Gelistet auf Docker MCP Catalog (5)
- npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcpAdvanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
- SemgrepMCP server for using Semgrep to scan code for security vulnerabilities.
- Ramparts Security ScannerA comprehensive security scanner for MCP servers with YARA rules and static analysis capabilities.
- stackhawk com.stackhawk/stackhawkAn MCP server that provides interaction with StackHawk's security scanning platform.
- Beagle SecurityConnects with the Beagle Security backend using a user token to manage applications, run automated security tests, track vulnerabilities across environments, and gain intelligence…
Gelistet auf Official MCP Registry (5)
- npm Supply Chain AuditCheck npm packages for typosquats, hallucinated names, install scripts and risky new releases.
- NPMScanDetect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
- pkgproofVerify an npm package before install: advisories, install scripts, typosquats, declared repository.
- npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcpAdvanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
- DepScoutScan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
Nach Bedeutung gefunden, nicht über gemeinsamen Code oder ein gemeinsames Repository: Ähnliche Plugins bleiben getrennte Produkte, und dies ist weder eine Bewertung noch eine Empfehlung.
Ist das Ihr Plugin?
Weisen Sie nach, dass Sie das Plugin pflegen: mit einer Datei im Repository, einer Datei auf Ihrer Domain oder einem DNS-Eintrag. Sie erhalten Hinweise, wenn ein Marktplatz es aufnimmt, entfernt, das Verifiziert-Zeichen oder die angeforderten Angaben ändert, und können den Remote-Endpunkt als Webdienst überwachen lassen.
Daten von Claude Code: claude-plugins-community. Die Zahlen stammen aus unseren eigenen regelmäßigen Durchläufen über die Marktplätze, zuletzt abgerufen am . Kontaktdaten von Plugin-Herausgebern veröffentlichen wir nicht.