lateos-ai/npm-scan

Modern supply chain security for the npm ecosystem. Static + behavioral analysis that catches what npm audit, Snyk, and Socket miss — obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation.

9 best points · 2 comments · 4 Hacker News posts · 19 GitHub stars · View on GitHub

Hacker News discussions

• Npm-scan: Modern supply chain security for the npm ecosystem (9 points, 0 comments, by lateos-ai, 2026-06-01)
• NPM-Scan – Detects TanStack Worm, Beats Socket/Snyk (Local/BYOC) (2 points, 0 comments, by lateos-ai, 2026-05-13)
• NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply Chain Attacks (2 points, 1 comments, by lateos-ai, 2026-06-05)
• Lateos/NPM-scan v1.2.0: Detecting Native Addon Malware (node-gyp Abuse) (1 points, 1 comments, by lateos-ai, 2026-06-05)