NPMScan

NPMScan performs lightweight static analysis on npm packages and dependency lists to surface behavior patterns associated with malicious code, including crypto-drainers and obfuscated scripts. It focuses on malware-style risks rather than known CVEs, complementing traditional SCA tools. Users can paste a package.json or package name and get a focused risk view in seconds.