Subcategory

Malicious packages

5 tools
Checkmarx SCA
paid

Software composition analysis with agentic AI remediation

Dependency auditing
NPMScan
freemium

Malicious npm package detection with AI-powered threat intelligence

Dependency auditing
Phylum
paid

Software supply chain risk analysis with ML-based malicious package detection

Dependency auditing
Socket
freemium

Supply chain security that blocks malicious dependencies at install time

Dependency auditing
StepSecurity
freemium

Supply chain attack detection for GitHub Actions and OSS packages

Dependency auditing