npm-postinstall-attack-scanner
aliksir v0.1.0
Detect npm supply chain attacks that use the postinstall + hidden dependency pattern to deliver malware. Built in response to the axios maintainer account takeover (2026-03-31). Scans lockfiles, od...
From the developer
License
MIT
Works with
Claude Code
Description
From the marketplace listing
Detect npm supply chain attacks that use the postinstall + hidden dependency pattern to deliver malware. Built in response to the axios maintainer account takeover (2026-03-31). Scans lockfiles, ode_modules, postinstall scripts, version ranges, and npm cache across 5 phases. Returns actionable remediation steps when issues are found.
What changed
No changes recorded yet. Follow this plugin to keep track of future changes.
Similar plugins
Find competitors to follow as you develop your plugin.
-
Security audit plugin that scans Claude Code skills, hooks, and MCP configurations for threats. Detects 37 attack patterns including prom...
Shared terms: attack, chain, detect, scan
-
Audit and take action to secure your repository against supply chain misconfigurations and malware.
Shared terms: chain, malware, supply
-
Endor Labs ai plugin for AI-native application security — scan and analyze across your software supply chain
Shared terms: chain, scan, supply
-
Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get s...
Shared terms: chain, dependency, scan, supply
-
Dependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and ...
Shared terms: dependency, npm, scan
Keywords
Files & skills
npm-postinstall-attack-scanner · catalog manifest
Saved declaration
{}
npm-postinstall-attack-scanner · catalog manifest
Saved declaration
{
"name": "npm-postinstall-attack-scanner",
"source": {
"sha": "833d1d06fbb50fcc185c182b5e771914cd4cebc2",
"url": "https://github.com/aliksir/npm-postinstall-attack-scanner.git",
"source": "url"
},
"homepage": "https://github.com/aliksir/npm-postinstall-attack-scanner",
"description": "Detect npm supply chain attacks that use the postinstall + hidden dependency pattern to deliver malware. Built in response to the axios maintainer account takeover (2026-03-31). Scans lockfiles, ode_modules, postinstall scripts, version ranges, and npm cache across 5 phases. Returns actionable remediation steps when issues are found."
}
npm-postinstall-attack-scanner · catalog manifest
Saved declaration
{
"name": "npm-postinstall-attack-scanner",
"author": {
"url": "https://github.com/aliksir",
"name": "aliksir"
},
"license": "MIT",
"version": "0.1.0",
"homepage": "https://github.com/aliksir/npm-postinstall-attack-scanner#readme",
"keywords": [
"claude",
"claude-code",
"npm",
"security",
"supply-chain",
"postinstall",
"vulnerability-scanner",
"axios",
"malware-detection"
],
"repository": "https://github.com/aliksir/npm-postinstall-attack-scanner",
"description": "Detect npm supply chain attacks (postinstall + hidden dependency pattern). Built for the axios takeover incident (2026-03-31)."
}
plugin.json observed Nov 6, 2026 · 10:46 UTC. Manifest source ↗
Catalog declarations and available plugin.json metadata are saved. Referenced skills and executable source files are not downloaded or tested. Missing components in a manifest do not prove that the plugin has none.
Installation instructions
Community
/plugin marketplace add anthropics/claude-plugins-community
/plugin install npm-postinstall-attack-scanner@claude-communityTechnical details
- Sources
- Community
- First seen
- Oct 3, 2026 · 22:13 UTC
- Last seen
- Nov 7, 2026 · 12:00 UTC
- Latest observed change
- Oct 3, 2026 · 22:13 UTC
- Collection status
- Listed
- Reported installs
- Not provided
Installation counts are source-reported, not independently verified active users. Observation dates are not release dates.
Download plugin data (JSON)Plugin history: freshly prepared. Prepared . Refreshed when catalog data changes or after 6 hours. Your account and Follow status are live.