npm-postinstall-attack-scanner
Listed in Community
Detect npm supply chain attacks that use the postinstall + hidden dependency pattern to deliver malware. Built in response to the axios maintainer account takeover (2026-03-31). Scans lockfiles, ode_modules, postinstall scripts, version ranges, and npm cache across 5 phases. Returns actionable remediation steps when issues are found.
Where this came from
- Listing read from:
- https://raw.githubusercontent.com/anthropics/claude-plugins-community/2285a368b0eab744111db241f9a2273a9d34f233/.claude-plugin/marketplace.json
- Homepage (as listed):
- https://github.com/aliksir/npm-postinstall-attack-scanner
- Read on:
- 15 August 2026