npmscan

Automated

A browser-based malicious npm package detection tool that scans package.json for supply chain threats.

Visit website Pricing page

Active plans

Total changes

Last change

Jul 16, 2026

Price trend

no history

What we know about npmscan’s pricing

Stable

Changes in 12 months

Cadence

Only change tracked, 2mo ago

Direction

New plan recently added

Category position

—

Not enough peers tracked yet

Current pricing

Free

monthly

Free

Scan package.json
Real-time monitoring
AI powered threat database
2.5M+ packages scanned
47K+ threats detected
99.8% detection rate
150K+ developers protected
No install, no login, no API keys
Instant risk summary

Price history

Last 1 changes

Date	Plan	Change	Old	New	Δ%
Jul 16, 2026	Free	new plan	—	$0	—

Similar to npmscan.

No confirmed competitors yet. These are E-commerce products at a similar price, matched automatically — not verified alternatives.

Sonatype

From $1,620/yr

A software supply chain security platform offering repository management, vulnerability scanning, and malicious package detection.

PrivJs Safe

From $19/mo

A security layer that scans npm packages for supply-chain vulnerabilities and malicious open-source libraries.

Socket

From $20/developer/mo (yearly)

Software supply chain security platform that detects malicious packages, vulnerabilities, and suspicious dependency behavior.

DepsShield

Price not tracked

Real-time dependency risk scoring MCP server that helps AI coding assistants make secure package decisions by detecting vulnerabilities and supply chain threats.

ChangeSpec

Price not tracked

Free open JSON format and reference implementation for API breaking change announcements, deprecations, and supply-chain retractions.

FOSSA

From $20/project/mo

Software supply chain management platform for open-source license compliance, vulnerability scanning, and SBOM management.