Open-source multi-ecosystem scanner. Detects compromised packages, malware artifacts, and C2 connections across your entire dependency tree.
JSON threat database with compromised versions, C2 IPs, malware hashes, and IOCs.
Checks node_modules, pip, Gemfile.lock, Cargo.lock, go.sum, composer.lock.
Malware files on disk. Active C2 connections. Malicious CDN refs. Bad lockfile shasums.
CLEAN / WARNING / COMPROMISED verdict. Remediation steps per threat.
# clone and scan
git clone https://github.com/oopsalldev/npm-supply-chain-scanner
./scripts/scan.sh --path /your/project
# github action
uses: oopsalldev/npm-supply-chain-scanner@main
# claude code
/scanBuilt with Claude Code by oops.zone