infynon-pkg
Universal package security manager — intercepts install commands across 14 ecosystems (npm, yarn, pnpm, bun, pip, uv, poetry, cargo, go, gem, composer, nuget, hex, pub), scans…
Paquete de plugins · de d4rkNinja
Resumen
infynon-pkg es un paquete de plugins para herramientas de programación con IA publicado por d4rkNinja. Marketplaces que leemos y que lo publican: 1 (Claude Code: claude-plugins-community). Lo vimos por primera vez el 2026-10-11 y desde entonces no hemos registrado cambios. Según nuestra pasada por los marketplaces del 2026-10-14.
Universal package security manager — intercepts install commands across 14 ecosystems (npm, yarn, pnpm, bun, pip, uv, poetry, cargo, go, gem, composer, nuget, hex, pub), scans lock files for CVEs via OSV.dev, auto-fixes vulnerable dependencies, deep dependency auditing, and scheduled vulnerability monitoring with email alerts.
Qué pide
- Se instala como paquete de plugins
Ninguno de los marketplaces que leemos publica sus herramientas ni los ajustes que pide.
Lo que declara, pide y ejecuta, completo
Instala solo plugins de desarrolladores en los que confíes. Mostramos lo que publican los marketplaces y no probamos plugins.
Funciona con
- Claude Code
Según los marketplaces que lo listan y el transporte MCP que declara, tal como lo documenta cada cliente. No probamos plugins.
Conectar
Comandos y configuraciones generados solo a partir de lo que declaran sus marketplaces. No los ejecutamos por ti ni probamos plugins.
Como plugin de Claude Code
Generado a partir de lo que declara Claude Code: claude-plugins-community.
/plugin marketplace add anthropics/claude-plugins-community
/plugin install infynon-pkg@claude-communityDónde está publicado
| Marketplace | Estado | Versión | Cifras | Verificado | Visto por primera vez |
|---|---|---|---|---|---|
| Claude Code: claude-plugins-community (Abrir el código en GitHub) | Publicado | 763812c | Forks (GitHub): 0 Estrellas (GitHub): 5 |
Sin marca |
Cada cifra es del propio marketplace y nunca se suma entre marketplaces. Un marketplace que no publica cifras no muestra ninguna: sin número no es cero.
Qué cambió
Nada ha cambiado en este plugin desde que lo seguimos.
Posiblemente el mismo plugin
Fichas que comparten una señal con esta, pero no lo suficiente para tratarlas como el mismo producto.
Plugins similares
Productos cuyos propios nombres, descripciones, herramientas y skills son los más cercanos a este por su significado, en todos los marketplaces que leemos. La cercanía se ordena solo dentro de esta lista.
-
INFYNON Package Security Manager — Universal secure package installation, CVE scanning, auto-fix, dependency auditing, and vulnerability monitoring across 14 ecosystems
-
Dependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and malicious code before installation using…
-
Check npm/PyPI packages exist and that a function or method exists in an exact package version.
-
Verify an npm package before install: advisories, install scripts, typosquats, declared repository.
-
npm-postinstall-attack-scanner
Detect npm supply chain attacks that use the postinstall + hidden dependency pattern to deliver malware. Built in response to the axios maintainer account takeover (2026-03-31…
-
Intercepts npm/pnpm install commands and enforces package risk policies before execution.
-
Hard-blocks dependency additions, bumps, and downgrades until a fresh, source-cited version check is recorded via WebSearch. Supports npm, pip, Cargo, and NuGet ecosystems. Uses…
-
safeinstall io.github.Mickdownunder/safeinstall
Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks
-
x402-gated safety checker for npm/PyPI packages before you npm install / pip install.
-
Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.
Plugins similares por marketplace
La misma pregunta a cada marketplace por separado: ¿hay allí un equivalente de este plugin?
Publicado en Claude Code: claude-plugins-community (5)
-
Dependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and malicious code before installation using…
-
npm-postinstall-attack-scanner
Detect npm supply chain attacks that use the postinstall + hidden dependency pattern to deliver malware. Built in response to the axios maintainer account takeover (2026-03-31…
-
Hard-blocks dependency additions, bumps, and downgrades until a fresh, source-cited version check is recorded via WebSearch. Supports npm, pip, Cargo, and NuGet ecosystems. Uses…
-
Evaluate npm and Python packages before adding them as dependencies. Automatically gathers package metadata, analyzes source complexity, checks security and maintenance health…
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
Publicado en Claude Code: claude-plugins-official (5)
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Use the JFrog Platform from Claude Code: Artifactory repos and artifacts, security findings and exposures, Catalog package safety and downloads, workflows across the SDLC, and…
-
Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check…
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
Publicado en Claude: knowledge-work-plugins (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
Publicado en Codex: openai-curated (openai/plugins) (5)
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Codex Security workflows for security scans, analysis, and investigation.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Inspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
-
Cloudflare platform plugin with curated skills for Workers, Wrangler, and Agents SDK plus the official Cloudflare API MCP server.
Publicado en Community GitHub marketplaces (5)
-
INFYNON Package Security Manager — Universal secure package installation, CVE scanning, auto-fix, dependency auditing, and vulnerability monitoring across 14 ecosystems
-
Check npm/PyPI packages exist and that a function or method exists in an exact package version.
-
Verify an npm package before install: advisories, install scripts, typosquats, declared repository.
-
Intercepts npm/pnpm install commands and enforces package risk policies before execution.
-
Evaluate npm and Python packages before adding them as dependencies. Automatically gathers package metadata, analyzes source complexity, checks security and maintenance health…
Publicado en Copilot CLI: github/awesome-copilot (5)
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Inspect a repository, improve Tiny Tool Town readiness, submit its listing issue, and launch remediation work.
-
AI-powered upgrade assistant for upgrading and migrating applications. Helps modernize legacy code and upgrade .NET applications to current frameworks.
Publicado en Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
code-apps-preview
Build and deploy Power Apps code apps using React, Vite, and Power Platform connectors.
-
mobile-app
Build and deploy Power Apps code apps for mobile using Expo (React Native), with native device functionality and Power Platform connectors
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
Publicado en Cursor: cursor/plugins (5)
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Scaffold and validate new agent plugins.
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
-
Internal team workflows for CI, code review, shipping, local automation, and verification.
-
Thermo-nuclear branch review: deep security/correctness audits, harsh code-quality rubrics, parallel subagents, thermos orchestration, and optional merge-ready PR flows.
Publicado en Docker MCP Catalog (5)
-
npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
-
A Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript.
-
Manage Zscaler Zero Trust Exchange via 400+ tools — ZPA, ZIA, ZDX, ZCC, ZTW, ZMS, EASM, and more.
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
-
Connects with the Beagle Security backend using a user token to manage applications, run automated security tests, track vulnerabilities across environments, and gain intelligence…
Publicado en Official MCP Registry (5)
-
Check npm/PyPI packages exist and that a function or method exists in an exact package version.
-
Verify an npm package before install: advisories, install scripts, typosquats, declared repository.
-
safeinstall io.github.Mickdownunder/safeinstall
Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks
-
x402-gated safety checker for npm/PyPI packages before you npm install / pip install.
-
Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.
Encontrados por significado, no por código ni repositorio compartidos: los plugins similares siguen siendo productos distintos, y esto no es una reseña ni una recomendación.
¿Es tu plugin?
Añádelo a tus proyectos y demuestra que lo mantienes con un archivo en su repositorio, un archivo en tu dominio o un registro DNS. Recibirás avisos cuando un marketplace lo publique, lo retire, cambie su marca verificada o lo que pide, y su endpoint remoto quedará monitorizado como un servicio web.
Datos de Claude Code: claude-plugins-community. Las cifras proceden de nuestros propios recorridos periódicos por los marketplaces, leída por última vez el . No publicamos datos de contacto de los editores de plugins.