npmscan

Under review· 2

A browser-based malicious npm package detection tool that scans package.json for supply chain threats.

Visit website Pricing page

Active plans

Total changes

Last change

—

Price trend

no history

Current pricing

Free

monthly

Free

Scan package.json
Real-time monitoring
AI powered threat database
2.5M+ packages scanned
47K+ threats detected
99.8% detection rate
150K+ developers protected
No install, no login, no API keys
Instant risk summary

Price history

Last 0 changes

No price changes recorded yet.

Similar to npmscan.

No confirmed competitors yet. These are E-commerce products at a similar price, matched automatically — not verified alternatives.

Sonatype

From $1,620/yr

A software supply chain security platform offering repository management, vulnerability scanning, and malicious package detection.

PrivJs Safe

From $19/mo

A security layer that scans npm packages for supply-chain vulnerabilities and malicious open-source libraries.

Socket

From $20/developer/mo (yearly)

Software supply chain security platform that detects malicious packages, vulnerabilities, and suspicious dependency behavior.

DepsShield

Price not tracked

Real-time dependency risk scoring MCP server that helps AI coding assistants make secure package decisions by detecting vulnerabilities and supply chain threats.

ChangeSpec

Price not tracked

Free open JSON format and reference implementation for API breaking change announcements, deprecations, and supply-chain retractions.

FOSSA

From $20/project/mo

Software supply chain management platform for open-source license compliance, vulnerability scanning, and SBOM management.