Re-exporting @andromeda/malicious

A deliberately malicious MCP server for E2E testing purposes

Detect trojan source attacks that employ unicode bidi attacks to inject malicious code

A fast, native Bun-powered HTML sanitizer with DOMPurify-like features. Protection against XSS and malicious content.

Audit your NPM dependencies for malicious packages

malicious

Detects usage of a malicious address part of a DeFi Hack

Cleans potentially malicious SVGs

React Native Shield Fraud Plugin helps developers to assess malicious activities performed on mobile devices and return risk intelligence based on user's behaviour. It collects device's fingerprint, social metrics and network information.

PMG - Package Manager Guard: protect developers from malicious packages

Malicious package PoC

Link Shield is a lightweight cybersecurity-focused npm package that detects suspicious and malicious URLs using heuristics, fuzzy matching, and threat intelligence patterns.

ClamAV for humans — scan any file and get back Clean, Malicious, or ScanError. No daemons. No cloud. No native bindings.

Yuan'an (元安) — detects malicious patterns in AI skills (13 detector classes) and system security baselines (Windows/Linux); purely read-only, zero-dependency and disciplined. Triggers on security audit / skill security check / malicious detection / supply

Protect any MCP server from malicious entities and confidential PII.

`lavamoat` is a NodeJS runtime where modules are defined in [SES][SesGithub] Compartments. It aims to reduce the risk of malicious code in the app dependency graph, known as "software supply chain attacks".

Zen by Aikido is an embedded Application Firewall that autonomously protects Node.js apps against common and critical attacks, provides rate limiting, detects malicious traffic (including bots), and more.

security warning - malicious package name

Jfrog Curation dummy malicious package

This package is no longer supported and has been deprecated. To avoid malicious use, npm is hanging on to the package name.