{"_id":"@lateos/npm-scan","_rev":"79-1b5d646dd388a70608153a0989cafdc3","name":"@lateos/npm-scan","dist-tags":{"latest":"1.6.0"},"versions":{"0.1.0":{"name":"@lateos/npm-scan","version":"0.1.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"MIT","_id":"@lateos/npm-scan@0.1.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli.js"},"dist":{"shasum":"bfdf9890aa1b7ec31ef5122c5a00fd1fd8e433aa","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.1.0.tgz","fileCount":3,"integrity":"sha512-dKeJ2k5uBKdYRSWZiswv6JRi/XAFj9eEJTDNUiJub0yqmdtewD4ZewECUcmPcB+iqDxk2GM/rrjG28848qDD6g==","signatures":[{"sig":"MEQCIASxQjeuO4WaJ8AiW8GMGuJfVnaftyKIhxLUjPiOqRcVAiA7oD9qI+SgAIxHwFJ1C8G3aEJ/rStf9Usj0hFuF6Ho4g==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":882},"main":"index.js","type":"module","_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.1.0_1778339188475_0.10107012589000908","host":"s3://npm-registry-packages-npm-production"}},"0.2.0":{"name":"@lateos/npm-scan","version":"0.2.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.2.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"aff4b9c6c103fa95bd88b5a01ffe9b79a8abab1e","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.2.0.tgz","fileCount":28,"integrity":"sha512-h02Fr/tCEwRcF447tWfwc1aHUqvFxvOjPfnanOFaHBACfAqSoPbljRxs90xYmwI5skxAoEu8SYrlCWmGmQjtHg==","signatures":[{"sig":"MEQCIDBHcaNkbJOtC3Jzf3HKPw8qVFWOvmUILgpdZrhWrptSAiBeyiLAOM+mqiTJLDf4l4yadm3/tbdMlJFahcEczrXQng==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":38104},"main":"backend/index.js","type":"module","gitHead":"a8bf5789780934b458b5b164ede94ead0e856d4a","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"acorn":"^8.16.0","adm-zip":"^0.5.17","commander":"^14.0.3","node-fetch":"^3.3.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.2.0_1778434626668_0.1904344074066735","host":"s3://npm-registry-packages-npm-production"}},"0.2.1":{"name":"@lateos/npm-scan","version":"0.2.1","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.2.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"15221b5de496be8314ec0a74b0dc4d82dd7e7f19","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.2.1.tgz","fileCount":28,"integrity":"sha512-EoH6bkZFE+PxK2oksxmprfjZkahL1fXehHzMG6tSuJnOnT0isw6rrmsyIEqDt8NKUm82uO0/wVEBry1ew6i7gg==","signatures":[{"sig":"MEUCID7v+Q/7x1xYGnEqgw6pWFvGlzG8yP6YJa2Fu83JP/mAAiEAxGLsJaCUi776nM2dFu4wxS93YVPvwKw4yxe5b+k9xZI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":38104},"main":"backend/index.js","type":"module","gitHead":"a122cda9ee2e6c3175b4a48ef8db96c090b76fda","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"acorn":"^8.16.0","adm-zip":"^0.5.17","commander":"^14.0.3","node-fetch":"^3.3.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.2.1_1778434793793_0.9337093174259077","host":"s3://npm-registry-packages-npm-production"}},"0.2.2":{"name":"@lateos/npm-scan","version":"0.2.2","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.2.2","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"4885388292a50b720733f29a18f77af344d2b53f","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.2.2.tgz","fileCount":103,"integrity":"sha512-MI4o+OI7Pk82oVd/TggAZYx3j1flSzJzQG+1LsqFwX8rL9NHGki37RVGPjJt3Btus+PlvUzkZCQZe1gvscSlSA==","signatures":[{"sig":"MEUCICGSvURa10ydL9WXC4XmYVRGSFxvzwOv7dl43JLHr+JzAiEA6Ss2e38RT4dPf0IajzdE9hnH1VH5QGwFsuxkSy4exnI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":52219792},"main":"backend/index.js","type":"module","gitHead":"8f0b6f0e55bc7ecdfae8ae32fe2f1938581e62a3","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","adm-zip":"^0.5.17","commander":"^14.0.3","node-fetch":"^3.3.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.2.2_1778436153261_0.8788098594027358","host":"s3://npm-registry-packages-npm-production"}},"0.2.4":{"name":"@lateos/npm-scan","version":"0.2.4","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.2.4","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"011cc188a893f35b3afcaed60f2241e833b7beb5","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.2.4.tgz","fileCount":103,"integrity":"sha512-kJWd9lnlAqk+FVtQohpWsq8AL6r1HqkXv1zStSvJVTkbPojKOR7f6DS++WrvUw5XIgbTZBiYyDYizwn7PlCK7Q==","signatures":[{"sig":"MEUCIHv/tZslGw6qsH8BUDdhkdqwcv1dSnpAVpeORx2O9kSMAiEA84kH7IM32M9p4VcPF0ccmMruUVFTjr4G0EHFwztDd8U=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":52219792},"main":"backend/index.js","type":"module","gitHead":"68743e25dc13e645a98c28a6e1a5cfa1c11dfbe0","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","adm-zip":"^0.5.17","commander":"^14.0.3","node-fetch":"^3.3.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.2.4_1778436200028_0.415040206999177","host":"s3://npm-registry-packages-npm-production"}},"0.2.5":{"name":"@lateos/npm-scan","version":"0.2.5","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.2.5","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"80da92f36a0f0cb1e3a8f2bb6794f8622f5fad76","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.2.5.tgz","fileCount":31,"integrity":"sha512-BoGmjljWTQGqcXZoRbHeTSWMEcku4RTJsbe7sTPyVS6EHsEZmflfzTEVd7hfQN3bvDP0uV1+epgPxTTP09PXAQ==","signatures":[{"sig":"MEQCIGEvUp3lihTZSh52bi7dXL+9MQv4v+bCal6IS7zD5sDbAiA62S6Mihj0jPQksgYDh7Zf9Yzg2mZrCFnLscBfbZ/jyQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":49421},"main":"backend/index.js","type":"module","gitHead":"636796cede205438c9783b334e8dffae3886ee58","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","adm-zip":"^0.5.17","commander":"^14.0.3","node-fetch":"^3.3.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.2.5_1778436225717_0.2602040706299076","host":"s3://npm-registry-packages-npm-production"}},"0.3.0":{"name":"@lateos/npm-scan","version":"0.3.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.3.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"1934dcc5089b0c7f47351ead72eafeb463ae9c2e","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.3.0.tgz","fileCount":35,"integrity":"sha512-yJBNjleiYwAPRv9EXEaJpezHqTJe25oCuq20LiS+oI5y03z5Gn+EDwpeFQuPklmEcIvL8EjB8UKp0sQ+0Hgk3A==","signatures":[{"sig":"MEUCIQDM83QHEpTdAWITGJT0ZVNBMNPaIQt3NSyC2urnS5xijgIgQvtwiy0+JamGbMpshchhO9zAdLwQcgWzH0V9tcO9QEM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":70757},"main":"backend/index.js","type":"module","gitHead":"bbbc19d1e4185f28ff51c68c42cdc38358c9b70c","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.3.0_1778437503912_0.2986446414302901","host":"s3://npm-registry-packages-npm-production"}},"0.3.2":{"name":"@lateos/npm-scan","version":"0.3.2","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.3.2","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"bf1a03a858c6e69014139edfffbbc0be75cfb347","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.3.2.tgz","fileCount":35,"integrity":"sha512-M4NLRQz+zpNRHMSzDt+H2HwLx6V7L5ukefGTKU1YaDBa1a+VUcBscTcu9rR5FZgq8uZpEOd8qj2GOoHS2AuZXw==","signatures":[{"sig":"MEUCIBHmQ9FawIxSEFaDzLn/DnyZmHiQpaRCeLrq3vzlN7V2AiEA0h3TXhK2EGJg/bcYVykqPQMpVDF9MB76LGK1WY9Wevc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":71999},"main":"backend/index.js","type":"module","gitHead":"4b58dfa89b760413c1d89e9f948b2f998443f782","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.3.2_1778437885914_0.19195095308631815","host":"s3://npm-registry-packages-npm-production"}},"0.3.3":{"name":"@lateos/npm-scan","version":"0.3.3","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.3.3","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"11597fce1e065c13d9d27a2d4f90d8456c5fcb61","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.3.3.tgz","fileCount":35,"integrity":"sha512-Ah9gRgQgC4gdTaEgpJkEvGp1eU6SphbIr6VAoxGZpeJc1BYNaMPG13TK6cJxLfrM5YPW0/4v2fe55DJ6XBurqg==","signatures":[{"sig":"MEUCIQDU6OBx6H3PBzRNpP1NDeHwtWU/6vcmj7o4R/el46cjOQIgXgRcEQxaLhnj3GFRqeMVG0fKvWb6tC6jFF8vCJckSFI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":72376},"main":"backend/index.js","type":"module","gitHead":"b818f379be0790bff77dc298b76c6dc5ec4f3092","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.3.3_1778438413895_0.7243870339576406","host":"s3://npm-registry-packages-npm-production"}},"0.4.0":{"name":"@lateos/npm-scan","version":"0.4.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.4.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"c01cea69aefba2b519ebb2ee1f7ede51c34dc8f7","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.4.0.tgz","fileCount":39,"integrity":"sha512-oC8a3njpeU8bDPZWDErTNWiZPnJuRQLVzX8q3Hx7DeUoHc3U2L2eyDFO8giS9vPpj4zqJ2+dIGWT+AGesMPYWA==","signatures":[{"sig":"MEYCIQDSD74xRw6tbT2s4iLIcBpSfuW5PxMgiyEdbavHfIb0FQIhAKaU69YFYHqsOrSzG6nv3Xhrx/i+eYCL21vbxOUZtWaU","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":84503},"main":"backend/index.js","type":"module","gitHead":"385576b1be32e3c7ba9c44a6a75bbec6c59ce542","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.4.0_1778448530479_0.0032212537462859014","host":"s3://npm-registry-packages-npm-production"}},"0.4.1":{"name":"@lateos/npm-scan","version":"0.4.1","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.4.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"cba01588b4a8b6061f07288ecffba6f8767d9b20","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.4.1.tgz","fileCount":39,"integrity":"sha512-ZpYoT+l6+C++QxBelGVPz2hPDqyRM4Tb5xV5LgDR4AXrWsTqcTzr0g7O0HMDUKJsg3DfE6UD1lO37ZV/2QbMHA==","signatures":[{"sig":"MEQCIHjPi2NjF05rbEPE102zoa2ouStiL2AVoNn2ker1SGHyAiB2r7w0id/oTWDGgVS5JC9lHd3lg2YFH8AHE6x57+pcdQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":85269},"main":"backend/index.js","type":"module","gitHead":"b48c5fe444305a4f39a88e01df248e4175026539","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.4.1_1778448611929_0.3139915652102663","host":"s3://npm-registry-packages-npm-production"}},"0.5.0":{"name":"@lateos/npm-scan","version":"0.5.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.5.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"72f8afea8ee4927628973292faa0671d58a5734c","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.5.0.tgz","fileCount":57,"integrity":"sha512-XSPEQj/BesfejFk9gBhJbjvjps9W9TjWhbsoBOOJRkil31WnUP6+hP7ft3BrB7LPtUxJ9n0J86pqSPYHDyxj4A==","signatures":[{"sig":"MEUCIAYUCw6NJevgO5HsIhwE25CHuBdk4wwfYQL3H6cGycTBAiEApHSW5K/2Tny0cWqWXb2I5WMSb9/5czT+C6GenfgqId0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":109287},"main":"backend/index.js","type":"module","gitHead":"360a9ed4db66b3587fc7442213193f26d835e90d","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.5.0_1778450806427_0.30478910601202824","host":"s3://npm-registry-packages-npm-production"}},"0.6.0":{"name":"@lateos/npm-scan","version":"0.6.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.6.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"ac61c0ffd49ec57b5801784e8c0ec0a0a1c99995","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.6.0.tgz","fileCount":62,"integrity":"sha512-ISdibJk2+mNoF8E54aRZNU8Ef9NZij0zW/Cc14pdSDT8lPieSwdvvy99Gb64VJVILSvJqYu8x8c6sNhBgPih0Q==","signatures":[{"sig":"MEUCIQDGrqwPCw84aRagOXEx5hlc0jSm1wnADuC90FOXpKZuywIgL3Kxfo2I1XIjByuMPr0nvRPQqdFDYyhiTuEPJnq7Pvc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":139697},"main":"backend/index.js","type":"module","gitHead":"c88b8cc41ef53cf3674e543c330342d45548b9e5","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.6.0_1778451569084_0.6991823167139923","host":"s3://npm-registry-packages-npm-production"}},"0.7.0":{"name":"@lateos/npm-scan","version":"0.7.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.7.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"81b94ef2c9c4af991fd8bb899f49a7fcb051ec70","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.7.0.tgz","fileCount":62,"integrity":"sha512-77CGjCKlqIlxCDKe1ARbmck/RE+0mViJ/eervXjvLOYm/iNY7wIW0ZkHBWRA04NxG2Aon49Z4v5sLZK+rLQoig==","signatures":[{"sig":"MEUCIGVdz+xOez0g1vACADMIQ0OibmkvFm5aC+OC1WIadZWQAiEA50xtH8c7gmtF325GuLGQ9Z/+HbFwPxaCI3k7R4UIhI8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":139697},"main":"backend/index.js","type":"module","gitHead":"2677dce3b4b68140a2dfe6bcc0c5bf5325631eec","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.7.0_1778451590800_0.07807841994481723","host":"s3://npm-registry-packages-npm-production"}},"0.7.1":{"name":"@lateos/npm-scan","version":"0.7.1","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.7.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"b5756dd9f365ce4d73b80e0d8d05e3a52c5aacb5","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.7.1.tgz","fileCount":62,"integrity":"sha512-o9Fq1A2mMHJFLpe7VlgU3l56Mg+Ei578gDkrYioMOAEEWJtCrdRPKz1xX0j2gz6EijKyX1q4Qt/ql4h4qcYTYA==","signatures":[{"sig":"MEUCIQCwRoZlRMKlIrEEHZTzeqsYd+tOoM/ELxCPoR9Z9GpfPgIgDIpwCP1Uf86Vr/gcskaPKAaRM4ZD+zFUm6lRNyhDrRY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":141546},"main":"backend/index.js","type":"module","gitHead":"d55e3e6f2c65c7e44c013db4e2fbec772f273c53","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.7.1_1778451652258_0.6028213294917626","host":"s3://npm-registry-packages-npm-production"}},"0.7.2":{"name":"@lateos/npm-scan","version":"0.7.2","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.7.2","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"e5df0577f9317acfa357be7b9bd28c629a1f6e84","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.7.2.tgz","fileCount":62,"integrity":"sha512-CNJDNKsa74aPVPQTiazudZV28dyKWqQqCnn/pII7+QJ2qV4KZqIzCABsBl9CwSKvncGrSJ8OiiBTLYbutcaluQ==","signatures":[{"sig":"MEUCIQCfzvIhwE+elnlNoix+ZAsyRYS2iy0qbdlCm2o7WRNuogIgVzAqQIX+IUWDE821uVZnMq0dBJBcDyDsAfLOQSf5k0M=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":140587},"main":"backend/index.js","type":"module","gitHead":"741f03ab952af59af8ba3d1c6d897d32b1aa96b8","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.7.2_1778451688249_0.20803882599922918","host":"s3://npm-registry-packages-npm-production"}},"0.7.3":{"name":"@lateos/npm-scan","version":"0.7.3","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.7.3","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"13cac1d0f6f26912c18702b1d97722ca096d6bcb","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.7.3.tgz","fileCount":62,"integrity":"sha512-yodLlcE1T5SFVIegdSVUMyXKP4EUPcLlvQ+niGGOx1HpY97z48c2uUwATxUIBr8v3n7RK1ozBV+c4MDM6z9JWw==","signatures":[{"sig":"MEUCIBoVdAwSDo4mr2DcZkPvm8E1WGg/tE6R52v8LmYLNstQAiEAmJTHKfUHcCjn9gln3wBlUEi1aWhOI7h44TV2M0AyBLM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":140587},"main":"backend/index.js","type":"module","gitHead":"204bd9dc0154d5423a3908e5ef83eaf516ebaca7","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.7.3_1778451717411_0.06490650686422961","host":"s3://npm-registry-packages-npm-production"}},"0.7.4":{"name":"@lateos/npm-scan","version":"0.7.4","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.7.4","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"5d15cdbc7903921f94100bbc3008601ae5a8b17e","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.7.4.tgz","fileCount":62,"integrity":"sha512-hfzkrEvikQ4t0X7/4G3FRDz7OEWQJGUokUUhy4ekYeda8WiV4OGWqT+yXzlDlxfUlIqQJrp3tJnfm89TkAudFw==","signatures":[{"sig":"MEYCIQDozpXx32bbQYn7sIOkrQaWwEpDLwemu2jA5CCGIWI0NwIhAMDJQP9SIF3vLfCRxOFuJa+VcWu/hFbzvJ0cYq+Pj9sl","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":140587},"main":"backend/index.js","type":"module","gitHead":"9d8fff717ea2b4d5091a26313c66c286c971aabb","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.7.4_1778451733962_0.6075893410436788","host":"s3://npm-registry-packages-npm-production"}},"0.7.5":{"name":"@lateos/npm-scan","version":"0.7.5","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.7.5","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"e943008fbec990e24d7a6dee3aebeb6c17ef7125","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.7.5.tgz","fileCount":65,"integrity":"sha512-eUKM6+htIrrHGq7G63b1Cc3wXefNTJaStR5U4QCRZeu4AXeOawEGCzSAJeVA5M6N/MSos1xJu4/LYGUIC7v9eA==","signatures":[{"sig":"MEUCIQD/4CnYKMFrDUdKqdt7TQHZ+JJZPsmmgGJfFczugm9rywIgJPL0/tMxk/9GQYWcK6w81rEgh1Vs0ozQEl41k8s/Ybw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":145029},"main":"backend/index.js","type":"module","gitHead":"24ea6e488bf3d30b36fac2dae66ee4eae632a026","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.7.5_1778452532863_0.9321523137689525","host":"s3://npm-registry-packages-npm-production"}},"0.7.6":{"name":"@lateos/npm-scan","version":"0.7.6","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.7.6","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan#readme","bugs":{"url":"https://github.com/YOUR_GITHUB_USERNAME/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"7cb822ea1caa416fc813bd5b1773c6d0487963a5","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.7.6.tgz","fileCount":67,"integrity":"sha512-wm3rl5UjXU2Agvvde5/CVnjLRoOOkfH0l9naEaopR5xOBRJlKpEAjPj7b0UoAaHzev6lQE2XWdyJbGGriZR6+A==","signatures":[{"sig":"MEYCIQDpsTwd8dPJtWMlW1u0OoLGOZg2wTV/qJcbPD4cSUB4gQIhAKOB2Z7nJ5u2/7jEAUUa3zHz3FpHFkUuo/Vrzq9kDo6N","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":160633},"main":"backend/index.js","type":"module","gitHead":"f7675dce5d2287d51458dc7350d5e871c341afe5","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/YOUR_GITHUB_USERNAME/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Powerful npm supply chain security scanner - detects malicious packages (Shai-Hulud style), behavioral analysis, SBOM, and compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.7.6_1778453920352_0.9173062815523663","host":"s3://npm-registry-packages-npm-production"}},"0.8.0":{"name":"@lateos/npm-scan","version":"0.8.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.8.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos/npm-scan#readme","bugs":{"url":"https://github.com/lateos/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"a71b71e59e0d3d3938b624ff3e4ba71771031c77","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.8.0.tgz","fileCount":43,"integrity":"sha512-OTw9Q5SDFKp83PSyQSNFWsK05hUav4TB29hewndO23Ko8zjbNHgEe6PIjS/q8etPlsgujv6gjcd0wy5u+dpaww==","signatures":[{"sig":"MEYCIQDeGOX6BV+OOanh4+lCJJpsCqgjl89SoQWmxMbbkJEDbAIhAOhJ5K+vtBF4xW6VTpr+WWuELsF2L9nZprb8h+i0CKpu","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":112556},"main":"backend/index.js","type":"module","gitHead":"32bdf8b9d473c642beaaeec2ec58bc77a246ee36","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3","node-fetch":"^3.3.2","better-sqlite3":"^11.10.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.8.0_1778520701457_0.1349208578416019","host":"s3://npm-registry-packages-npm-production"}},"0.9.0":{"name":"@lateos/npm-scan","version":"0.9.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.9.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos/npm-scan#readme","bugs":{"url":"https://github.com/lateos/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"3a0d960e31c262279034ac1ad37dbc850f775376","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.9.0.tgz","fileCount":42,"integrity":"sha512-JdgQgJg2rXvIU6MVzmbLiIomgoNOeUtdy4KanMXSN6w6KOHz7RiIWoHLoCV/cBVlPObVTKq3BY15KHgnBV63zA==","signatures":[{"sig":"MEQCIF8zYjNdUviWVL9JPrNNdTf58DiwRIyKX9VvU7riLLupAiBJPkknm1UN2+iWgBHEU420Oot5bDY4b6UzAp2A0soX/g==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":87563},"main":"backend/index.js","type":"module","gitHead":"52a7f887858dd4833db009926963cd3bdc52f0ce","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3","node-fetch":"^3.3.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.9.0_1778529917196_0.6632723229720379","host":"s3://npm-registry-packages-npm-production"}},"0.9.1":{"name":"@lateos/npm-scan","version":"0.9.1","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.9.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos/npm-scan#readme","bugs":{"url":"https://github.com/lateos/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"55fdf4287cf6b9c0f9be0043181927fdcccf5a62","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.9.1.tgz","fileCount":42,"integrity":"sha512-qbHRuZ8ukkfDCL37kfAHz4kWqFH3xfuhWG5Jx8nvg52CHec1xmFV6mJz7JfLfSDwCz18+1pqlg7Gs5+YV2xbKQ==","signatures":[{"sig":"MEUCICN0cCr2czhT7WQeGk3XGAibR6/pZI2iUq3ljs1WcF3AAiEArKsQaCtXfAuP4x4Ym+tAqfRtlgn+l4I3DCvZAldF8To=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":90799},"main":"backend/index.js","type":"module","gitHead":"87e81d9d8b76750e401d29d33e6ac2a8ff0850fd","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.9.1_1778532791392_0.20039693692435012","host":"s3://npm-registry-packages-npm-production"}},"0.9.2":{"name":"@lateos/npm-scan","version":"0.9.2","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.9.2","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos/npm-scan#readme","bugs":{"url":"https://github.com/lateos/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"e59430d54ab7ec2f098dcb18cc6ab8d9bd1a7f71","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.9.2.tgz","fileCount":43,"integrity":"sha512-dELCmBdAkOrYqMitE54nOIwBt43/tzuoeHnLeein1/Obz9CkQRXpLl6TGqfZ999NVugwzbecVzQJmaB27uF8Pg==","signatures":[{"sig":"MEUCIC/rP7CVpJeNhWDKz/H4+LZ9Dd5bS4My8qt0dU96tIjqAiEAo+g7fnhwUVyu8nFIlGArIBlgwV8KC5+h64CmCM1Tp6I=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":100331},"main":"backend/index.js","type":"module","gitHead":"b883cf283cb496890e792aa287cafc42a90f0a4f","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.9.2_1778535882078_0.3285747999635358","host":"s3://npm-registry-packages-npm-production"}},"0.9.3":{"name":"@lateos/npm-scan","version":"0.9.3","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.9.3","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos/npm-scan#readme","bugs":{"url":"https://github.com/lateos/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"d4861b4224b150f45e14eccf7de115b3e959cb62","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.9.3.tgz","fileCount":47,"integrity":"sha512-iogvVL76KTj4xwKvWNEJTB45a8En3ZuuFlvqRcn0hjXCzzfk4nyHv/Cg+MNSqat8FXITVvdEDh2U7PC8skQ3SA==","signatures":[{"sig":"MEYCIQCKdsTAROQu9zEdrU2C4y3cGf+MjAEoJaCpf+mBGlQIvgIhAMeknSmcxsiSv3dNYCHp+VMcUhiK/Tuh6KWwN3VPJBTL","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":186301},"main":"backend/index.js","type":"module","gitHead":"14c62279621e97caae223f41d1198efce5dad052","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.9.3_1778536591950_0.7966868362670609","host":"s3://npm-registry-packages-npm-production"}},"0.9.4":{"name":"@lateos/npm-scan","version":"0.9.4","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.9.4","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos/npm-scan#readme","bugs":{"url":"https://github.com/lateos/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"602efad7c9f1e5d35ef7387974e0f7a53fc2480b","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.9.4.tgz","fileCount":47,"integrity":"sha512-K35ZtZFvhGyhtGEh9TBRk6GY05N9DttGYEPDPYhJ4Hx+RbWTGWRzn+8enzwkmDKw3zqzjkFawiavs0PaHJiuvg==","signatures":[{"sig":"MEUCIEgfFhCZxuct1i9+1mLgymIEkK/qsJJJPZcKuK3yqpa6AiEAy5d8Fm9jLx8JUO3l+39DHpt79jj3FqrlheaNshi79RM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":187743},"main":"backend/index.js","type":"module","gitHead":"28e4d1b08c939b9e97af955b7af1beaa57d54ddd","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.9.4_1778536802848_0.5562256889123949","host":"s3://npm-registry-packages-npm-production"}},"0.9.5":{"name":"@lateos/npm-scan","version":"0.9.5","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.9.5","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"eab2bf4bf42066b565b9d0d7e67f6c819b5c7046","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.9.5.tgz","fileCount":47,"integrity":"sha512-NxS9/GBXdXCINVJv4ne0NGAmD7S4f/YqV736DVu9P0q52x4IOySkumYenwqHMjTvJTDWsup+Pu1SbR7Byp0ESg==","signatures":[{"sig":"MEYCIQCbGrMKDwBeT9OqY8pTBlRL+JodTpaFWT2tChKmyHRM1QIhAMpeLxJGqaWREaNPG2KN0HusOWYNKvehv5nRt/9QsdPY","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":187848},"main":"backend/index.js","type":"module","gitHead":"48acc406f6f536ded4c0126838bda98e602dd110","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.9.5_1778551962374_0.9259729653303514","host":"s3://npm-registry-packages-npm-production"}},"0.9.6":{"name":"@lateos/npm-scan","version":"0.9.6","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.9.6","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"6531ccf4a2d56a2c80f03ef70a25da738a8ee99e","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.9.6.tgz","fileCount":47,"integrity":"sha512-S3Dsrg6+1J8EAq4XnYYHUNNMQXklpG/sS+grRunY+DgKvVp+C0sS4Dp//QGX2dFU5uwS3WFowR/M7QnYf7o2rw==","signatures":[{"sig":"MEQCICf4NcDGjlw1iFnbRl8zHpji7B84Z4rbYlAy+33UqI2mAiAqQe3n8WHRBQnJV6NWa7rhoF/hdYwzFEtJB5udpDr7cQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":189996},"main":"backend/index.js","type":"module","gitHead":"97599dca2b3077b0cf2b7eba85c1cd75e84cad72","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.9.6_1778553522610_0.5519156201085187","host":"s3://npm-registry-packages-npm-production"}},"0.9.7":{"name":"@lateos/npm-scan","version":"0.9.7","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.9.7","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"7c0daec360cdbf4ff152204223b939ca0a51227b","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.9.7.tgz","fileCount":47,"integrity":"sha512-wfFkMH1+bHYivNkyGfM0erIRm7MOdrlmMkUyFBFd2KYJjJTyLkyFv9dVGTz348YOoyqZ1yV4tLVyFZzWRchQBA==","signatures":[{"sig":"MEQCIENdWebFRJl8jatpd1UZrvx4MN6AJqRwWHP8fqjyd0jSAiAbnsg3EI21acGwXPjN8ZbzL0kcOgaSWqisisBfvLjtoQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.9.7","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":189496},"main":"backend/index.js","type":"module","gitHead":"53a02bbe9c7497f68063f2c8ce13bf96317e78eb","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.7","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.22.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.9.7_1778598926430_0.3726786152970276","host":"s3://npm-registry-packages-npm-production"}},"0.9.9":{"name":"@lateos/npm-scan","version":"0.9.9","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.9.9","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"70c3e7df5387c774d8401d9a216bd781da1803c9","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.9.9.tgz","fileCount":49,"integrity":"sha512-URLkUSuscEi4tu3W+vlXu5FuLU0bROAgEr0VCqBlNp3MqbfyaX+y3DZUCXvZiOWf3N/6k4FPXIQPiX1rgGlCTA==","signatures":[{"sig":"MEQCIDjrGeEGVrcLkERNIoBsn3EnISEGVbQ5bU+LPsBynw1tAiB/F6IOT0l7YhLbu1kVfcpHCLXhzSHw6dsNT4xk/JqYuA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":224210},"main":"backend/index.js","type":"module","gitHead":"ad2acb7ff024e343fa084348d158fac6b262ac85","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.9.9_1778631230723_0.12395225720349212","host":"s3://npm-registry-packages-npm-production"}},"0.10.0":{"name":"@lateos/npm-scan","version":"0.10.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.10.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"eb4ffaf3c0726ff675ab6bdceb8d8a10b3c62df6","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.10.0.tgz","fileCount":50,"integrity":"sha512-RpqZEqKADgPKpiyXxMV3ShLad4wwf6ZaaU5d/xiViKervyoiyKyQOABcHpr3GCL3Pb6tmCbeimVwz2kMkfZB+w==","signatures":[{"sig":"MEUCIQChW91GJWsH2rK0pEP7rRbVlsFmzWPCaX9Fjn45l3+64QIgTB+xk2ASlKhl+TNBEHx0kRJQWPnokyUX0C/1gqqR5kw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":230221},"main":"backend/index.js","type":"module","gitHead":"f4a0e22e2efb15f24e423d61a4d1306c8efd6b81","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.10.0_1778632333613_0.5939792398478045","host":"s3://npm-registry-packages-npm-production"}},"0.10.1":{"name":"@lateos/npm-scan","version":"0.10.1","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.10.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"962242013efe6095f10569dcbf2deac872ff0a1d","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.10.1.tgz","fileCount":50,"integrity":"sha512-U6OMou3ktE9PqbaWaw7CB2jbfCKn6YKLNehQSK9wlJn7SBmrqamgkEcaLN7KGAXPxvOwQdKTVLgVbNwlJmYCJw==","signatures":[{"sig":"MEUCIQCkbRpbdgH+Cu3bfgUr8nwkCvBoMU7hAEPYsEE052fUbgIgJt7Fs9V2/p4kjzqOLp62QpzcpVgPYr27xDk4rOF5dWc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":231233},"main":"backend/index.js","type":"module","gitHead":"f8cb560425943823c5484bac5142502a37cd5315","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.10.1_1778642616603_0.12690427949586658","host":"s3://npm-registry-packages-npm-production"}},"0.11.0":{"name":"@lateos/npm-scan","version":"0.11.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.11.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"85cfa94a6db0b01c1bba351e5d0d11a946f84388","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.11.0.tgz","fileCount":50,"integrity":"sha512-9LGJ5/0JcTytc1GXi/nf15HBwvx9BRhf5Abd1sbRjhkntjfGPqqCdBO+z2fvbIKzGfuHJPwHcFmUYMfhq7gj/A==","signatures":[{"sig":"MEYCIQDDFBR9r+GctVMjU4SgVBo7lXbgtuJsl+5u6INa9zAAtAIhAIKPj6LhRQB3CCLvXpAfAB0rCWZ/Rn117QbA3Bv2iDhT","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":231233},"main":"backend/index.js","type":"module","gitHead":"f8cb560425943823c5484bac5142502a37cd5315","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.11.0_1778643085135_0.08576455758722479","host":"s3://npm-registry-packages-npm-production"}},"0.11.1":{"name":"@lateos/npm-scan","version":"0.11.1","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.11.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"75e90719ab0527543af1cf6058ad6c0a8ff76311","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.11.1.tgz","fileCount":50,"integrity":"sha512-Lm9EGzDdz7T2yzAMq/mXFxMClRXpJFdKipVi2jDQ+QNuF5MH0uq1LMuZtDlYsiJsa8yWPcRsb3W78FWXsDQGYw==","signatures":[{"sig":"MEQCIDp1poxWZH06uKCvv3XQYj/j0y5b4gVwL+6OljSZG/OUAiAmO/qgFyqrpN9NM7aXbWadvlR1D6az3fqkbx0TdXAxjw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":231225},"main":"backend/index.js","type":"module","gitHead":"f6204f68443b1ac9079bb1431230969454d744ed","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.11.1_1778643130887_0.32855944837548545","host":"s3://npm-registry-packages-npm-production"}},"0.11.2":{"name":"@lateos/npm-scan","version":"0.11.2","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.11.2","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"1c06cc312a332556a483c69ac8caea534ad961b7","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.11.2.tgz","fileCount":50,"integrity":"sha512-2d53Oa1+5ADvjQ8UrsTx++LNcw8uUfQWrqlzXP2if7MdjSvu4i3+HHwzweeWYmbRzi1rHwuFzkPOdKMFAbiUwg==","signatures":[{"sig":"MEUCIQCL9/IjhRhka8V5xAsb6m8vVzDPWCP3y57U0f/3nxHZPAIgDYWicmYGTOYDX9gQB4YkZDGVRryWo34/mqtrzjSSAoY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":231566},"main":"backend/index.js","type":"module","gitHead":"651484b87e98ab67e9669199a121551714173bfb","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.11.2_1778700798110_0.6176734758236724","host":"s3://npm-registry-packages-npm-production"}},"0.11.3":{"name":"@lateos/npm-scan","version":"0.11.3","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.11.3","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"0855ba4f958bc092fbd5127d3eddaa066239c0e5","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.11.3.tgz","fileCount":50,"integrity":"sha512-sFkPYTZYRRtCenFbeCoRnlse6G+Xr7VJJzHNdEJldOdAEUviRYlQ8iZcSy5XbBCgRRFnV8A6usMnTFf8yViJ/w==","signatures":[{"sig":"MEYCIQDbx3QP1rEErFJMzNHf8JOnGEk83elzukO2c8J4Mc/b4AIhALdy6eoeo3Sz+3BkWJ7foLbDkjfBrNN0E1NCgNvOnOD6","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":231708},"main":"backend/index.js","type":"module","gitHead":"6037f140328e63cf57aaffcfa65207ee25f0ec89","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.11.3_1778706811624_0.6841229702921097","host":"s3://npm-registry-packages-npm-production"}},"0.11.4":{"name":"@lateos/npm-scan","version":"0.11.4","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.11.4","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"f1ff20888893b60f2eb5dc0f969db567b3a4d282","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.11.4.tgz","fileCount":50,"integrity":"sha512-6SOE3iRnTEqfmo+rQTjMwDvivJMCJQZACqIMZ4xCGUOLtlnRtzJ1Ya9KRpvTLh6BK0eFIvF4qvm+3HLbD8BkXg==","signatures":[{"sig":"MEUCIQCjCWdtyWifs/N7AWtIw4pihIavppNxtykrdH+tP8WxHgIgRWQ9ryfz+QJiMUM6tlYoFDWiNJdLQo+ZQbBmcvh+4Bc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":231494},"main":"backend/index.js","type":"module","gitHead":"16058504d3a94324697566d34b9b933d37e35028","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.11.4_1778706975112_0.6019949796158155","host":"s3://npm-registry-packages-npm-production"}},"0.11.5":{"name":"@lateos/npm-scan","version":"0.11.5","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.11.5","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"c04189696b6bb5a661110d86d652703081347d9f","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.11.5.tgz","fileCount":50,"integrity":"sha512-VwTUrzdGQWcWPS/Bzl7cZxKpkLAr0GvHk4wxntVWkUN3j4Wnl77nT6WkpM2fDvAIwjVkkTTY/D3vKzSevIJjoA==","signatures":[{"sig":"MEUCIGh6MN05mqLWBG4+OrZJ6ND//a8zMaU1AInafegFME1fAiEA7gJEgKhMBq15MY4ny8TuKWzP7rFb285DEa0oWXHdjho=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":231762},"main":"backend/index.js","type":"module","gitHead":"1d0f6c90d4dbf8fb0b085686cc689822f08b677f","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.11.5_1778707081429_0.2645849199269952","host":"s3://npm-registry-packages-npm-production"}},"0.11.6":{"name":"@lateos/npm-scan","version":"0.11.6","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.11.6","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"505b9b4daf98bddbc92e2d0fb8910c0fd449f273","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.11.6.tgz","fileCount":50,"integrity":"sha512-xlCdb0a0hhMLTDIDWoevOmD/wpsugjgpiF8LJLEadWoHhDe06EYV7tyRGbwn9p9Dyfxf8lzHnu1rJkhcPXZCfA==","signatures":[{"sig":"MEUCIDpgWvqQawdST5c3e5XKS9VfIV8HYQkVFV9PoiaCBnWkAiEAjJlzREd6cTWVT+BuLZXwRWsdYPSDEVm3TqTLyOjIkQU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":231704},"main":"backend/index.js","type":"module","gitHead":"1a77a53c669312d8d6409222e56ef33bcb23d83d","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.11.6_1778707175338_0.13055763924465835","host":"s3://npm-registry-packages-npm-production"}},"0.12.0":{"name":"@lateos/npm-scan","version":"0.12.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.12.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"9c3a766af9e55d2ffe54a61bf58cdc509e163b12","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.12.0.tgz","fileCount":51,"integrity":"sha512-jj1NpK4fLsdBlUnmqRVSNOQlS4oxqFg25X6s8squ8KSR866q/qRjeK9jPCq4ip0wZxHoEthKlnSBTN3apwt7/A==","signatures":[{"sig":"MEUCIQD+L4OYf1n+o0y2EpXaqFDJVOB6G87FZKP51Mpq2SZusAIgGr9A6oTdBzRf2/WtJcgx4RlQ8ZKuhZ9ISRc4E5Zf/zo=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":233082},"main":"backend/index.js","type":"module","gitHead":"1cd6c509eab5499f59df12ace54fc14370d5d92a","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/package{,-lock}.json":"node cli/cli.js scan-lockfile --fail-on high"},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.12.0_1778707495321_0.43910519466464937","host":"s3://npm-registry-packages-npm-production"}},"0.12.1":{"name":"@lateos/npm-scan","version":"0.12.1","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.12.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"2e91b7b032c88ebe83a2f713bdc662b74318e202","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.12.1.tgz","fileCount":51,"integrity":"sha512-FED+1i7CefvXAgqepSDzARVCKkok0sJxXm6UDf+WOIUCPxIdlEfXA0/I3GU99SfSPZlLBWLeKMiJt8OU/F6abQ==","signatures":[{"sig":"MEUCIQCbl2juqAGJrAa2WWMogtSeggTPfKJ0kt8J2+mNUltyKwIgYTTYtOwxgnIoJQnvLLFN5bR+7FEn3TZojT20aAaJi4w=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":236357},"main":"backend/index.js","type":"module","gitHead":"1fc58664371cb8d0b9d3b8253718d92380eea2d2","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/package{,-lock}.json":"node cli/cli.js scan-lockfile --fail-on high"},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.12.1_1778707717351_0.8006865312275782","host":"s3://npm-registry-packages-npm-production"}},"0.12.2":{"name":"@lateos/npm-scan","version":"0.12.2","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.12.2","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"d35f910d16988952239739545fd9aabe29f4b20a","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.12.2.tgz","fileCount":51,"integrity":"sha512-fTHexT6Gky7DNpYAIvFCk5b4sbrSk+lwJz7w+u9K4CuWvmpIsgpr+it6+PLMRCAs/NqOqwNL3CUjrC+j0rxeJA==","signatures":[{"sig":"MEYCIQDoW7MhacCaQj83y6HSxLNpBIkfVEJIct5mn3svheUilwIhANcugQ8g7XC5wacDGY/cbtFYvF1u+ke6lMMcj9EcuV7P","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":236451},"main":"backend/index.js","type":"module","gitHead":"073b4b4bb744b92458f7ea59e855febce508f3a2","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/package{,-lock}.json":"node cli/cli.js scan-lockfile --fail-on high"},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.12.2_1778716616516_0.8102699273343945","host":"s3://npm-registry-packages-npm-production"}},"0.12.3":{"name":"@lateos/npm-scan","version":"0.12.3","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.12.3","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"af01bff6b341adf43dd45905f110d81d454e84b5","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.12.3.tgz","fileCount":51,"integrity":"sha512-tE5yRiQJIRS+rmLujaSnJxoP7W3SDyik7GsmHo1Oh7Cca2jFYmKO0DSZCesFkJBSaHrgY+iuYMNTFjc+Vqnf4Q==","signatures":[{"sig":"MEYCIQCTadh/G2A5MUNF+tWUuhm/i1KGGwSVX/kHOewuWJb29wIhANodrK7p0zTaPpE5TsxJ8yGaYDcix9Q09gXz1PQxfvGu","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":236816},"main":"backend/index.js","type":"module","gitHead":"eb6f7f3676a4e17e1085f807709eda19c9df8a8c","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/package{,-lock}.json":"node cli/cli.js scan-lockfile --fail-on high"},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.12.3_1778716946161_0.6696993534893354","host":"s3://npm-registry-packages-npm-production"}},"0.13.0":{"name":"@lateos/npm-scan","version":"0.13.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.13.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"b10e4578c128d153894d83f387afb36d74e64aac","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.13.0.tgz","fileCount":52,"integrity":"sha512-8lJ12W2M6AiK1FIfRiYkJu8YOiH5Mz6M2spNH4bnjUJyzGbn4w1xtJliCdSfjsc5FDoWIuNWAX8Bdg616UYrig==","signatures":[{"sig":"MEYCIQDQQ52OlB2ziQu3TuxEbsDbcrTOC7RxTlO6To0hKJGBaQIhAPLTIW5ePwOXy+UUSOtGA8q318q/kqGlGU+YW+3lvD2U","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":243154},"main":"backend/index.js","type":"module","gitHead":"50d6fa144df989dd6c214cc4492e8ad07e8ba60a","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/package{,-lock}.json":"node cli/cli.js scan-lockfile --fail-on high"},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.13.0_1778717855573_0.6301586049051162","host":"s3://npm-registry-packages-npm-production"}},"0.13.1":{"name":"@lateos/npm-scan","version":"0.13.1","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.13.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"5dcea46c5c803e3103c1c9bde323e9e8c863fbb5","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.13.1.tgz","fileCount":52,"integrity":"sha512-EToAVToJAPcG+euYrsmh7yMAkhDQwe7k4Idq9S3kEhHg4bH/XjoG7fX78NuQ+jZtqICzfFeiKipR8Uru+PEpwQ==","signatures":[{"sig":"MEUCIC5whT7afYXSkyUyIvOlDIrZLLbqjn60fqSbbFEtZGT1AiEA25YbMY5dYYLU1W0C7anSWxpQhz4XVGblQ0EGZI5SCPg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":243418},"main":"backend/index.js","type":"module","gitHead":"e68c24efae8150d3888f94939618c3d158888720","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.6.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/package{,-lock}.json":"node cli/cli.js scan-lockfile --fail-on high"},"_nodeVersion":"22.20.0","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.13.1_1778726394949_0.15148089201943415","host":"s3://npm-registry-packages-npm-production"}},"0.14.0":{"name":"@lateos/npm-scan","version":"0.14.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.14.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"752debba7c16676a1ee1400d24a601e7b3fee43b","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.14.0.tgz","fileCount":54,"integrity":"sha512-ZD1HhmvdS+l+1YRVjXiT9aVJPJufgYTNUF4LYTrqO5JCL0W7HuJSFj7LAlIwnl4+gjTXf/Mf5pyBgCIjfSGYjg==","signatures":[{"sig":"MEUCICs2KCHLg6wjlRQEP+2fHqWHTRDm//nyTHFnPzsrkhUdAiEA3QMezDfXC7BF3skkJTKvFd9wHOsNSHLTm/+0hCUdfpU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.14.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":256431},"main":"backend/index.js","type":"module","gitHead":"158592d7f0524032d77267f19dae088507d2e2da","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.7","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"node cli/cli.js scan-lockfile --fail-on high --yarn","**/pnpm-lock.yaml":"node cli/cli.js scan-lockfile --fail-on high --pnpm","**/package{,-lock}.json":"node cli/cli.js scan-lockfile --fail-on high"},"_nodeVersion":"22.22.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.14.0_1778780117801_0.7319151971669813","host":"s3://npm-registry-packages-npm-production"}},"0.15.0":{"name":"@lateos/npm-scan","version":"0.15.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.15.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"98096801125027b4ae768c8e5155b6a66b0f60c0","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.15.0.tgz","fileCount":55,"integrity":"sha512-Aij3RkM01g48hA25PQPHDUgfG5T/I75+8NVb5BeR0V3hXGeiZ40zRJ3aLvCHOYOcWLq1hi5X0GuZv8YuFSFNoQ==","signatures":[{"sig":"MEUCIQCIv/KL+rWay0L4HBpgn/teOEuZ/XEN+00sKHIMm1F9zQIgLjKlbgIJJhgW1Rsch+dAWtLEBwO173cpr09gcys0ZqE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.15.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":259278},"main":"backend/index.js","type":"module","gitHead":"03ebf638269989224d37924922137c577ac5f1b4","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.7","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"node cli/cli.js scan-lockfile --fail-on high --yarn","**/pnpm-lock.yaml":"node cli/cli.js scan-lockfile --fail-on high --pnpm","**/package{,-lock}.json":"node cli/cli.js scan-lockfile --fail-on high"},"_nodeVersion":"22.22.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.15.0_1778787596270_0.30900127715644676","host":"s3://npm-registry-packages-npm-production"}},"0.15.1":{"name":"@lateos/npm-scan","version":"0.15.1","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.15.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"b9d7fa2398c1d6246f3177715e27b17c2d5e60c1","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.15.1.tgz","fileCount":55,"integrity":"sha512-L5X6YebKr6nEzyc7TOEhFGFxBlpX2t8I/r0K3P+NJ7FNQYHJsmtMzUzANkloVhyteFMQl1bqC82zEyKz518rhQ==","signatures":[{"sig":"MEUCIQCo02sjrgAAcdr7rpKZHC7fPp27PDyQ1SCqObLTSa1iowIgfZHVs3APy68P8yRmqmGKVBqd6BNNnK67XfA5vPCfXWA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.15.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":263715},"main":"backend/index.js","type":"module","gitHead":"ac6f9ac7c8a7f24ec47960eee6d3616070fc0446","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.7","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"22.22.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.15.1_1778819253103_0.3341185939509621","host":"s3://npm-registry-packages-npm-production"}},"0.15.2":{"name":"@lateos/npm-scan","version":"0.15.2","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.15.2","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"2abd503c34c7a619ce744fade5ed215cb8710f42","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.15.2.tgz","fileCount":63,"integrity":"sha512-8ojILebLdQtqczX6/n0/oMe7WsQdcmDNLUzx6uF7zU0QRFBrlGmHaUtr450GYCTHkeB8G28N77NgFCNqp5OO/w==","signatures":[{"sig":"MEYCIQDQfbbMctK9th6l+n1Ib21uCkHvG3cSOJOJCLB+rPFNnQIhAP/lz/fYg+Sp+ix6ZK2lgZjypAZhbRvgyPCqMQ7BC5gi","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.15.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":286661},"main":"backend/index.js","type":"module","gitHead":"7592088f3b63311d7b95e9e72319abdae4dbb746","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.8","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"22.22.3","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.15.2_1779495229792_0.047835489351786276","host":"s3://npm-registry-packages-npm-production"}},"0.15.3":{"name":"@lateos/npm-scan","version":"0.15.3","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.15.3","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"0255c1fbcde0db43fba4390c976877eb242bc604","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.15.3.tgz","fileCount":67,"integrity":"sha512-FFjApINcdDags6wpkSr3EfFIdz4i4eI3fW9qZZTQigXxtTksQN94aPruLOrjfcQ9ILOKM7qavX6E7Bo2JoFj/Q==","signatures":[{"sig":"MEQCIDEZaPaUwI2EAHJk6RNOP0M6k94frZWTNhugo2bW1HwPAiAhKTudQ2nV1hXc8450LuhFMiZzuWLuIRK9HmQtHD80bg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.15.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":303826},"main":"backend/index.js","type":"module","gitHead":"d6d6dd1e456d6325c0309d521e46ede040fdca61","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.8","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"22.22.3","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.15.3_1779496843821_0.20725159536967275","host":"s3://npm-registry-packages-npm-production"}},"0.15.4":{"name":"@lateos/npm-scan","version":"0.15.4","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.15.4","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"e7de754d5cfdda75a9979d3ce84159ad9c197934","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.15.4.tgz","fileCount":75,"integrity":"sha512-Pms5kH+wNwYfD+odWfmEdWYTzHAkRO0lW+bouRbxULCa0ZuAsA/6Vv8+G+4a1Dd7D6Oaueec9Gj4k+ICacIW0g==","signatures":[{"sig":"MEQCIE3TY+N+g4i+rNnSWtgWrFi2VJTwDH5wfoj/57DWVNISAiBcJKsxtgxjffDoOk+LewR17qsRW0oFpHo1N5j4aTuGNw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.15.4","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":321921},"main":"backend/index.js","type":"module","gitHead":"1c2ef033d46190f90b27bfa26d446ea76a6c04c9","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.8","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"22.22.3","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.15.4_1779728785372_0.4559241614482883","host":"s3://npm-registry-packages-npm-production"}},"0.15.5":{"name":"@lateos/npm-scan","version":"0.15.5","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.15.5","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"7fd4167ce492d4fbad84ac7214589acc5b7dc721","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.15.5.tgz","fileCount":84,"integrity":"sha512-hFVO2qJfktYJYMKdn6RYtyxaeH7c5IW9BULw2Z0b6+GirBJFrE4XwwEKgvCZdsx11Ww/mAN/uFA+eZLAx4m50g==","signatures":[{"sig":"MEQCIAntWyI446i0BRbjf4GB2p+Z1zIcnju6tnBNjvr/RMzqAiBh5r9txjcTlG+Sb1P9PjQVwxKbM/ycNToh7uAdxj+gKA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.15.5","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":360138},"main":"backend/index.js","type":"module","gitHead":"2102afd4aa3d58572a67ba04b9dbc1c37fae27ce","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.8","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"22.22.3","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.15.5_1779732428105_0.22149476448219962","host":"s3://npm-registry-packages-npm-production"}},"0.15.6":{"name":"@lateos/npm-scan","version":"0.15.6","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.15.6","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"10caf5e3b7bc94589bfb8f11f8950c50b9bebac1","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.15.6.tgz","fileCount":89,"integrity":"sha512-aQQ47ZZRxzykc4jR3CmX2+nslDCrAWCfpbMGTvlF3UFyou4sADh9AgNqF49JHLQF4ldEujA5cv/9BPeTp6l2Ig==","signatures":[{"sig":"MEUCIQDG/D+rgKfQLG35bLwC7WJ5nG4xcB6tdoZsVETcoE9ckQIgEuMK4Oz8JiGul8Kuee2aOLMjuNo7KSV3IXKZLpr0GAk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.15.6","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":391880},"main":"backend/index.js","type":"module","gitHead":"cee51cfc154c06cedede3b8d22616ac4152e850b","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.8","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"22.22.3","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.15.6_1779925361325_0.7105150119978936","host":"s3://npm-registry-packages-npm-production"}},"0.16.0":{"name":"@lateos/npm-scan","version":"0.16.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.16.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"41cbc8a1ac721d82e9e0807e0562697545c4ff77","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.16.0.tgz","fileCount":113,"integrity":"sha512-cpjpmXSoA7dOpd1OA8wTY9SDwHHp4OoQ5l7OlcdNw3xFycBe/JLzLJQUSaUXJ3Ood+5J82ildutbQghpnUttBg==","signatures":[{"sig":"MEQCIBs8llZFEtg8ScB/2z/+UYYna4y9ltRVRi3ZBriXG1uIAiBVz0K9sFzaDo8R07HYMdrsapOP5y8v4IY1k5dgDAt4cA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.16.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":432770},"main":"backend/index.js","type":"module","gitHead":"2a07cfa464dea7fbba2faa3f3ee06cce11704160","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.8","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"22.22.3","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.16.0_1780015699133_0.1493517393530137","host":"s3://npm-registry-packages-npm-production"}},"0.16.4":{"name":"@lateos/npm-scan","version":"0.16.4","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.16.4","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"970bfe88af92feeff7b48319d9d786aab77540cf","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.16.4.tgz","fileCount":127,"integrity":"sha512-43yMb2UYmMJuY+Ds/gD6L6pNuhDOr1dTzV2VuwMDXhooEqUVrtgOsLgSx3jRDwfXebmRi2Adlj0Dd7YQk2Osyg==","signatures":[{"sig":"MEQCIECGqQX2r4CJSJf00lW/EjZg5EICFfCsjT6iXC27hYILAiB4LR9XWBi/2HSHnUVO8PY9bqJH+n9zcfydOIJ456YqCA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.16.4","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":496697},"main":"backend/index.js","type":"module","gitHead":"428ac931d7a893cfe41dcd7e0b95bf6690157ed4","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.8","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"22.22.3","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.16.4_1780153493659_0.9835299538783691","host":"s3://npm-registry-packages-npm-production"}},"0.16.5":{"name":"@lateos/npm-scan","version":"0.16.5","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.16.5","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"21c226596dc82504a82b9523db265dbe9c974f5f","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.16.5.tgz","fileCount":134,"integrity":"sha512-AoNaO7cmNKWeBX0qskj+2ObXWzY1iPWghmy7gtdUL8qt1Q3rL3yxuDvPauf8+TXa0aq+Garbm7vXVqz27nZYNw==","signatures":[{"sig":"MEUCIQDP5ZbW0EJgqjaxcifwpEv98hLM1Y+NgH4GDCaZcXpncgIgNp2Uvan7iJFN4ZOVRJ7+moYTvHXEh3DRHEm0M5JSG3s=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":561404},"main":"backend/index.js","type":"module","gitHead":"7671fbf37e7671e5e92b2e0540603a58cb787808","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.14.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"24.14.1","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.16.5_1780261573300_0.6990001033668551","host":"s3://npm-registry-packages-npm-production"}},"0.17.0":{"name":"@lateos/npm-scan","version":"0.17.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.17.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"a4f8ba5caf2f40634100418e2c0324e3653f1543","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.17.0.tgz","fileCount":134,"integrity":"sha512-RBRadLWO5dEZesS7B7wiFmbtRmvOnIeERSFgXCBuPz1kbW11lJ/5RhE99OXcW1brBKZ2tqUGr9AJHOf/SKR2Uw==","signatures":[{"sig":"MEQCIAVy4H+hwGDQs6OiHFGoUlEYdtf4JWVytcDzWfK4ZF1YAiBW1qdqV4sWkXbaAB+Gt6+AUXkVMfP1cA0p856BMsA97A==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":561404},"main":"backend/index.js","type":"module","gitHead":"9690ef8355343d4db8774dc45aca33ed6d29a1f8","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.14.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"24.14.1","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.17.0_1780261810531_0.5733623774263796","host":"s3://npm-registry-packages-npm-production"}},"0.17.1":{"name":"@lateos/npm-scan","version":"0.17.1","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.17.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"4583350e17b5600dba36b2078817be75434c0cc4","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.17.1.tgz","fileCount":134,"integrity":"sha512-WNss1+syCW1OnRm5CbhQGRuzM8PMJu448bQHyAJ/+4zmnGAmj8fQ1Dr4ikf+xcOhplABOz3CVADFruU7rye8Rw==","signatures":[{"sig":"MEUCIG5JSjy5uMGWCmPHy1Lzi58PKeVzrL2oDFpxaw0ijfDzAiEApL+bctW1Bto22UP6MQbs/4RNv86ay0EbJ7b7iNPimJc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":561404},"main":"backend/index.js","type":"module","gitHead":"75fd3063435de3fc84f9c912293d1fb1e0a732c6","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.14.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"24.14.1","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.17.1_1780263531490_0.8094414992630579","host":"s3://npm-registry-packages-npm-production"}},"0.18.0":{"name":"@lateos/npm-scan","version":"0.18.0","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.18.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"32258b0e04550d06ef7985b8035f72d97ba7b032","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.18.0.tgz","fileCount":134,"integrity":"sha512-5YgeLoT3kUQAo2RHQms2vDyBbrwat1WjfzUswNsh4evvIC+VxfQk6Zb0SSep1A0+VHuDvyFKLTZJcUs9C6zo4g==","signatures":[{"sig":"MEUCIBJn9yGs3PiknSjfY3t3xNBfzn39j23FReAT7KWTXzLPAiEA+zVxoXScgpY8iKQKmKU17AKxwDFgIj6+iWxI8eI9UZI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":561404},"main":"backend/index.js","type":"module","gitHead":"56cfcaf28d296077b43b0054ea37cd533f19dfe4","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.14.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"24.14.1","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.18.0_1780279175194_0.9801456575683363","host":"s3://npm-registry-packages-npm-production"}},"0.18.1":{"name":"@lateos/npm-scan","version":"0.18.1","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.18.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"2f3068d709c191eebf2a8ee3d1e6e09d3ac7b918","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.18.1.tgz","fileCount":134,"integrity":"sha512-sy5Ni3PnSoMHLqmRY5yC0Daylxah3mb+o7Bta4au2tVdSmH35yR5jx09370rfUY59Y/CYhl1vWLiClMxebvggw==","signatures":[{"sig":"MEUCIE/xHCGJv7afyOZZVM5JAq0ftaLSFzfPgEGK4AY+RyC5AiEAtDgrvc0oNYLfyMBQnZaIvb3mWpAnd/BdT6qOOO+GVFg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.18.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":550417},"main":"backend/index.js","type":"module","gitHead":"d7a89421a4d7e2bd6ac08a3cbb6e5eeb7a98aa67","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.8","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"22.22.3","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.18.1_1780279875406_0.9474491382653449","host":"s3://npm-registry-packages-npm-production"}},"0.18.2":{"name":"@lateos/npm-scan","version":"0.18.2","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.18.2","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"64ba6b3679a80b68819985917cf9d78aa9b80cb8","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.18.2.tgz","fileCount":137,"integrity":"sha512-m2aIOMivSH8Vv8jrPUq8HdpqFxVfjcb+AjqGLZ6LjmarVM5mBteCTQJoVux2YNyBnaLoNlDZVzwxKsR3mNdhhA==","signatures":[{"sig":"MEQCIFO7FU493t509RxNeeaObTUcgd6NwVIMYSYiPpLx4siPAiBA1sodWGfc0skTj+FZ4qtruA0bOH/N30/A2Kn28DrCgA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":573868},"main":"backend/index.js","type":"module","gitHead":"95b1c5fc55bffd90993486be3bf59a94106d3e49","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"11.14.1","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"24.14.1","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.18.2_1780424076820_0.9158452888724378","host":"s3://npm-registry-packages-npm-production"}},"0.18.3":{"name":"@lateos/npm-scan","version":"0.18.3","keywords":["npm","security","supply-chain","scanner","malware","shai-hulud","sbom","compliance"],"license":"Apache-2.0","_id":"@lateos/npm-scan@0.18.3","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"9900bc6b4ce47564bf60092afca67cd24a9afbee","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-0.18.3.tgz","fileCount":137,"integrity":"sha512-UHDm03OTu0jtquwGu0aZPR3MI0PoHV/yvI9RgCMip3r1J2SMWImHBmnHuLIc2hTfxn8kelLb/gbXyXTPdVPkwQ==","signatures":[{"sig":"MEYCIQCT7Lz5Qj0iWeq0QV0Evxcyw18+WQmvFC42VfwrWNUBOQIhAN9wBEgi5BAFQrd/4MdYPM0AXTelqXh1atxoxhuqHQQT","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@0.18.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":562841},"main":"backend/index.js","type":"module","gitHead":"715e8555173a2a64893fba271d11b39d77ca9beb","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","test:coverage":"node --experimental-test-coverage --test"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.8","description":"Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"22.22.3","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_0.18.3_1780424329179_0.9026339792333551","host":"s3://npm-registry-packages-npm-production"}},"1.0.0":{"name":"@lateos/npm-scan","version":"1.0.0","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.0.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"4dba002017f27179deb9c36c80c06d65e9f6ee87","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.0.0.tgz","fileCount":138,"integrity":"sha512-Kz6xhznKQlXEn0yZC81/HmBRigMvkO3xfqh8VcSpcI/aIHcXqS8kbj7waoDWZTT0cCiAw5V3UyPa3Qxv1CmB2Q==","signatures":[{"sig":"MEYCIQDChXnLDi8AB5gAh5A3ie4VU8wBMWAL80+6SQd1rW3kXwIhAOIbuiEIaFYWz9jwARq8n7B+WzGAG1TRKUB2jmbqDAvY","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":635330},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"834dd3c2cbad3f44f1d8d875c6abe641e8ccfc73","scripts":{"dev":"node cli/cli.js","lint":"echo 'Lint stub'","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","prepare":"husky","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.9.8","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"22.22.3","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","lint-staged":"^16.4.0"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.0.0_1780501074321_0.3191178666745593","host":"s3://npm-registry-packages-npm-production"}},"1.1.0":{"name":"@lateos/npm-scan","version":"1.1.0","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.1.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"cf05455fdc78339acafb8fe08e6ab8d244107bba","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.1.0.tgz","fileCount":143,"integrity":"sha512-0Bgg0g2lg6Z4jRbZ09yLASlfFfo6Zr2p9soj8yI6oNwe/LhHn1y0jh92Sq899QL+9CeUK4fT6pScKISrsH8A4A==","signatures":[{"sig":"MEUCID5y/vKhf0HlPCNtBJQr640/StyL/4YPeLuFReTLm7/gAiEAwGKmQjdpmLj4/uLlEHnEetJ/sScbNUmHZUjCMVF7S70=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":677450},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"c1d2b4e6c95e5698f03fa7cac9aa716dad7b60ec","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.1.0_1780626816789_0.4899682558123981","host":"s3://npm-registry-packages-npm-production"}},"1.1.1":{"name":"@lateos/npm-scan","version":"1.1.1","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.1.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"cda130fa4b10b330ccf118130747ddb360c782c1","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.1.1.tgz","fileCount":143,"integrity":"sha512-qYUAOQHO464WVGNd8191LeQw/l81L0ZXxPGfvVFonfyagGXIU24gi1LG9QeqSD0xEJxRk8AMnGDPtA65S5nF2A==","signatures":[{"sig":"MEQCIAjIZTUjqo3O4AyknZiOkWpKqborMIzZ4LoNo8r1R5gYAiAoDYlAfbal66KHvmirERh2i6IEAaUbGAZ6pCrXE+/CvQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.1.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":660318},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"5f3ac1b7733b18efd9e5351e02bef46ce289ec0e","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.1.1_1780628199075_0.17510455889343524","host":"s3://npm-registry-packages-npm-production"}},"1.2.0":{"name":"@lateos/npm-scan","version":"1.2.0","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.2.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"bdfbf78565aa2bdec26130ff0f6048722f60cece","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.2.0.tgz","fileCount":143,"integrity":"sha512-ftZ9+3w5FDsRjc8QAQoDZsBDvlVaD5s3qspIKtkU6qxb+xqSvzgkQplhEWXmy1oYoskhAkwiVinzxrzakPX1Ng==","signatures":[{"sig":"MEUCIAhRQehqMvzaCBHhv7es0kEGrz2fV18Au6qePrKh5fjbAiEA5NJe/SnAceu0IJQEPBh4XUa0UWgRRWrmEgXEwDl8V/0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.2.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":677450},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"ed0d8b80fac0ad5c2c68a713d1f68cbdd3594772","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.2.0_1780688459428_0.05757564772634427","host":"s3://npm-registry-packages-npm-production"}},"1.2.1":{"name":"@lateos/npm-scan","version":"1.2.1","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.2.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"a5b43f6e3772ac6a16e2cf0eea06c949469c5242","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.2.1.tgz","fileCount":144,"integrity":"sha512-xInaEeJOc+b7D7G4hCcVXPuwsUVjWPD8jBRfzstiZBaxnNompnCtAZBn1hirVv0HMhUwHfixsy5OtU1dvvHLvw==","signatures":[{"sig":"MEYCIQD5BkTMYMSwoD12zCa5SisM0nHxz9I4JO1m1bjYkRogSgIhAIGeT5uEcLixs8wo0jQbqZIMK3s6w2wgGYhyL1xidw/v","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.2.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":671615},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"70f05353c4be7a5503f3f4cfc6e53f68417ce5a9","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.2.1_1780690021832_0.7363561957744427","host":"s3://npm-registry-packages-npm-production"}},"1.2.4":{"name":"@lateos/npm-scan","version":"1.2.4","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.2.4","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"05878b6f8422e63a5ad408bd86b50add58df0d45","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.2.4.tgz","fileCount":147,"integrity":"sha512-FIB9uManpbT2Ogtn/DgugqDTmSvv0lRQcUxa3K4uxsmT5FwErY8wLEeAkKsrWBcZQSh9Lg55a9mHvGYFeJdwmg==","signatures":[{"sig":"MEQCIHHkbRaWhV06oAZzOVLlbwYakQaFxPNU7rKLXJWc9Cc5AiB0iYjHAhZDHGAgy1G5qRAA5JItgoUdqL6+yyk60sgg1g==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.2.4","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":696626},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"f1ad26ef2230c26137a8de35b1f10a21d4b5fb74","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.2.4_1780800678734_0.24263029252308654","host":"s3://npm-registry-packages-npm-production"}},"1.2.5":{"name":"@lateos/npm-scan","version":"1.2.5","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.2.5","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"5c3a905166a4e8b7f076340c7535200409286f13","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.2.5.tgz","fileCount":151,"integrity":"sha512-zwmzw/laB0GAXiXCRKu8BY7EP17bWa+ym2tdjdYPu8TChYYXJby5dAL/XnqbyfK+JcNh9vZKbIBbVocAQ039Ng==","signatures":[{"sig":"MEUCIC5Tl80TrUNh7NrGY/NCqDmq1NIKe3myP2+ZOLAMSPv2AiEA7m+uGLcogbdXvCuCVaC2CPIn5LCWC8mXNbHUn/ajXdY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.2.5","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":731929},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"970ab104dce2bdded11ab020b9ead6f4a117637d","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.2.5_1780874142659_0.7347695858430088","host":"s3://npm-registry-packages-npm-production"}},"1.2.8":{"name":"@lateos/npm-scan","version":"1.2.8","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.2.8","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"4bebd23e943ce1a7512b86a1887fcaf15bd50d03","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.2.8.tgz","fileCount":153,"integrity":"sha512-v8DFRQjIYCbly4vWgA40dLMKL9ay+G32khzozQ58NDqt4bvXU2wMbsjfkVIChQd43x7Jgm+LWCs+E2g6w7yAag==","signatures":[{"sig":"MEQCIAKy1PWT+M8CCqpOcbbAFUl93xR76x3wk401EfiSm5EFAiB/AtjHraZxZ0AoFg2EEgTEd3LsSOvuqrv/0FUnpVYaHg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.2.8","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":721763},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"267c6dbf4a3b0a736725ec9d7f0fbd7d58d0187b","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.2.8_1780973337504_0.3917154437594472","host":"s3://npm-registry-packages-npm-production"}},"1.2.9":{"name":"@lateos/npm-scan","version":"1.2.9","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.2.9","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"be1660e1be4b93754cc93ac04292bf4965fc592b","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.2.9.tgz","fileCount":155,"integrity":"sha512-FSEhu9GX35LPKigG40xzJLNu1j5I9tPSpN7PaYmG7PZYEPgysWMFBk6a9frV5BjiiMslHI90uBma9H1326WVKg==","signatures":[{"sig":"MEYCIQD/v3m+hlNJLSmNP5FKSVXRhT2abHvNkBsywI7KdVltuAIhAOM/78Agt3Up2ddgP9GJ4SO/kFMyU+DYUXPUG/y6E4U2","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.2.9","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":697951},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"5f9fd0ce6a42a8d5a7635d37317ea84acfdb5ff3","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.2.9_1781024944995_0.4063916109224164","host":"s3://npm-registry-packages-npm-production"}},"1.3.0":{"name":"@lateos/npm-scan","version":"1.3.0","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.3.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"36d58a68641559d7fdcf6c41a63f243f18775f12","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.3.0.tgz","fileCount":160,"integrity":"sha512-yW1KojpyVH+sUr1fSQlI1Da3pqv5q0DI136xapq7s/U6pV+fCTlaZxul35YJ0z+6msfqrI0w2hny6TGEufbLRA==","signatures":[{"sig":"MEYCIQDA/qPQifapBmZsPdv9lXlkXkizwuGEPNnGg2r8J9t/DAIhAKygESoXvTlQMfZOwBxu07PyPlXuZ7kPWPg4lRGlhM5q","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.3.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":648772},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"a32cbb8e543b665a58dac66c71325ffef2af898e","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.3.0_1783963771049_0.43590196036831363","host":"s3://npm-registry-packages-npm-production"}},"1.4.0":{"name":"@lateos/npm-scan","version":"1.4.0","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.4.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"61164da660ab56dd1b3c3e4b85d1f8b0013e2a3a","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.4.0.tgz","fileCount":160,"integrity":"sha512-N+4lQaoPpdgpW0PoB7AeaxllmulKeq+K9WJrnivyQV13+HYbGQTo2KOWmn4a2Y42kGkmOsNtIt0BLs5H5CSlFg==","signatures":[{"sig":"MEQCIEUStrtH0EzIN5eBR0bwsNOfu+Pm3jZxmcuLBsT7UnDfAiA7Q12IMxkQUw2sdzgwHM0JQhqFR2QQr2ydeUBdmVTqGA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.4.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":654702},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"3bd5e0c570340cfde342d9dcb549d9f749394b2a","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.4.0_1783974450304_0.5469878731305626","host":"s3://npm-registry-packages-npm-production"}},"1.5.0":{"name":"@lateos/npm-scan","version":"1.5.0","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.5.0","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"c2483be8c78cedd6bad16e60fd7156ead9438f26","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.5.0.tgz","fileCount":161,"integrity":"sha512-r1mb6k8bV4QvoqsdkGGOS7ITBp0rk7hyoD1VDT7nmJ/dMZApmUPTzp+1koglj59iddRQexOg3isrAb705OK4Yg==","signatures":[{"sig":"MEUCIEi6QM03aE2lVF0S3kNQChwP1/jPScjmgUAuOSPA1BKbAiEAvOIJJcPD9bqXB53YsEPFFpcAOpuKRADEdlAu8NjDOxg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.5.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":661813},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"4335f16784156d3c380922a45a4068829f905733","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3","acorn-walk":"^8.3.5"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.5.0_1784000644111_0.3967605647049206","host":"s3://npm-registry-packages-npm-production"}},"1.5.1":{"name":"@lateos/npm-scan","version":"1.5.1","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.5.1","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"18b2c6579e76ea8530b6979899ca4541b1202fd8","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.5.1.tgz","fileCount":162,"integrity":"sha512-6bHmQNCVCuHQEFh+hDsotRjsX2Q+5clsriIG+e9kqx5sdtoVDrPuDskbKyvLXZ43bCEyFPqiQru3YGTa7QwVBg==","signatures":[{"sig":"MEQCIG6xzG6xEUxC3d9enGZ15u62lZ6YGkXd9/CrxZgvT/OAAiBWp2dFZRwBaK0A7hES58oLAbmwGvucfz+7F42QOA9QUQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.5.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":670525},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"30a9e4a56af447a18c9fb65eaa9d9b650adbe0f0","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3","acorn-walk":"^8.3.5"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.5.1_1784223186436_0.22896297357923778","host":"s3://npm-registry-packages-npm-production"}},"1.5.2":{"name":"@lateos/npm-scan","version":"1.5.2","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"license":"Apache-2.0","_id":"@lateos/npm-scan@1.5.2","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"homepage":"https://github.com/lateos-ai/npm-scan#readme","bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"bin":{"npm-scan":"cli/cli.js"},"dist":{"shasum":"89df23f7a3e75727a339b456be00fd517c745357","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.5.2.tgz","fileCount":165,"integrity":"sha512-ePQO+HOFXU/jRu2RDw3N0z6RU7dkk8rYm9Phfhw4lqe/L6RppvhMa20jiIz6farqlkUs9SNE1z37cYhjG4OjfQ==","signatures":[{"sig":"MEYCIQD17LKm/Oba6zZtjjtN2xgak8gqwMz+BCP0EQds14wBjwIhAPcHUl1yk2MFhg8idxBRqw6rE2wfhv00ziweYt1rzcsp","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.5.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":692622},"main":"backend/index.js","type":"module","engines":{"node":">=18.0.0"},"gitHead":"1f5ce6141b502251ab6efe59370063e8566a9588","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"overrides":{"brace-expansion":"5.0.9"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.1.1","pdf-lib":"^1.17.1","commander":"^14.0.3","acorn-walk":"^8.3.5"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"tmp":"tmp/npm-scan_1.5.2_1785462596735_0.46819007390388157","host":"s3://npm-registry-packages-npm-production"}},"1.6.0":{"_id":"@lateos/npm-scan@1.6.0","bin":{"npm-scan":"cli/cli.js"},"bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"dist":{"shasum":"d0df3228e348e528c50fb7e2a22ff33360e27ac2","tarball":"https://registry.npmjs.org/@lateos/npm-scan/-/npm-scan-1.6.0.tgz","fileCount":174,"integrity":"sha512-fgvTdErVRM4rfwvwXw/z9FT7DNRolbFQ4l2qE5sCXpJ8AEJiLnrqYqsbPcvLPybbIEIMUTGBqXkP56NeG3R4tA==","signatures":[{"sig":"MEUCIEGYb1T2c54HbB7Cv9qn0XSiCzc5EDl+mqM8iKBnkfMUAiEApZtZmqQLbDTdjLVYbhmmsF8gFE1m3+n2roW71Hp3P6c=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQDBBUHDCr2LowsBNvun3FpKZOnk5gzcSaVRWY5C6NRBQwIgFA3aBbGM++Qd8Bxkfu+h1Lyaimd9QagMvT96gRk3VuA="}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lateos%2fnpm-scan@1.6.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":831875},"main":"backend/index.js","name":"@lateos/npm-scan","type":"module","engines":{"node":">=18.0.0"},"gitHead":"176d216e4a595c6a9213dead8792f19d1b62d275","license":"Apache-2.0","scripts":{"dev":"node cli/cli.js","lint":"eslint .","test":"node --test","build":"echo 'Build stub'","corpus":"node tests/corpus/run.js","format":"prettier --write .","prepare":"husky","lint:fix":"eslint . --fix","validate":"npm run lint && npm run format:check && npm test","format:check":"prettier --check .","test:verbose":"node --test --test-reporter spec","calibrate:fps":"node backend/scripts/detect-false-positives.js","test:coverage":"node --experimental-test-coverage --test","calibrate:fetch":"node backend/scripts/fetch-top-packages.js","validate:analyze":"node backend/scripts/analyze-validation.js","calibrate:analyze":"node backend/scripts/analyze-false-positives.js","validate:campaigns":"node backend/scripts/validate-detectors.js all"},"version":"1.6.0","_npmUser":{"name":"leochong","email":"lowmls@gmail.com"},"homepage":"https://github.com/lateos-ai/npm-scan#readme","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"overrides":{"brace-expansion":"5.0.9"},"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"_npmVersion":"10.8.2","description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","directories":{},"lint-staged":{"**/yarn.lock":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --yarn'","**/pnpm-lock.yaml":"sh -c 'node cli/cli.js scan-lockfile --fail-on high --pnpm'","**/package{,-lock}.json":"sh -c 'node cli/cli.js scan-lockfile --fail-on high'"},"maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"_nodeVersion":"20.20.2","dependencies":{"tar":"^7.5.15","glob":"^13.0.6","acorn":"^8.16.0","sql.js":"^1.11.0","js-yaml":"^4.3.1","pdf-lib":"^1.17.1","commander":"^14.0.3","acorn-walk":"^8.3.5"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.39.4","prettier":"^3.8.3","@eslint/js":"^9.39.4","lint-staged":"^16.4.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.6"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/npm-scan_1.6.0_1787258336183_0.5434471818725459"}}},"time":{"created":"2026-05-09T15:06:28.310Z","modified":"2026-08-20T20:38:56.608Z","0.1.0":"2026-05-09T15:06:28.617Z","0.2.0":"2026-05-10T17:37:06.797Z","0.2.1":"2026-05-10T17:39:53.941Z","0.2.2":"2026-05-10T18:02:34.646Z","0.2.4":"2026-05-10T18:03:21.544Z","0.2.5":"2026-05-10T18:03:45.854Z","0.3.0":"2026-05-10T18:25:04.056Z","0.3.1":"2026-05-10T18:28:44.877Z","0.3.2":"2026-05-10T18:31:26.130Z","0.3.3":"2026-05-10T18:40:14.034Z","0.4.0":"2026-05-10T21:28:50.624Z","0.4.1":"2026-05-10T21:30:12.069Z","0.5.0":"2026-05-10T22:06:46.586Z","0.6.0":"2026-05-10T22:19:29.282Z","0.7.0":"2026-05-10T22:19:51.067Z","0.7.1":"2026-05-10T22:20:52.398Z","0.7.2":"2026-05-10T22:21:28.381Z","0.7.3":"2026-05-10T22:21:57.603Z","0.7.4":"2026-05-10T22:22:14.146Z","0.7.5":"2026-05-10T22:35:32.999Z","0.7.6":"2026-05-10T22:58:40.489Z","0.8.0":"2026-05-11T17:31:41.621Z","0.9.0":"2026-05-11T20:05:17.375Z","0.9.1":"2026-05-11T20:53:11.530Z","0.9.2":"2026-05-11T21:44:42.221Z","0.9.3":"2026-05-11T21:56:32.099Z","0.9.4":"2026-05-11T22:00:03.005Z","0.9.5":"2026-05-12T02:12:42.651Z","0.9.6":"2026-05-12T02:38:42.752Z","0.9.7":"2026-05-12T15:15:26.583Z","0.9.9":"2026-05-13T00:13:50.885Z","0.10.0":"2026-05-13T00:32:13.787Z","0.10.1":"2026-05-13T03:23:36.801Z","0.11.0":"2026-05-13T03:31:25.301Z","0.11.1":"2026-05-13T03:32:11.082Z","0.11.2":"2026-05-13T19:33:18.256Z","0.11.3":"2026-05-13T21:13:31.856Z","0.11.4":"2026-05-13T21:16:15.262Z","0.11.5":"2026-05-13T21:18:01.563Z","0.11.6":"2026-05-13T21:19:35.494Z","0.12.0":"2026-05-13T21:24:55.512Z","0.12.1":"2026-05-13T21:28:37.491Z","0.12.2":"2026-05-13T23:56:56.677Z","0.12.3":"2026-05-14T00:02:26.340Z","0.13.0":"2026-05-14T00:17:35.729Z","0.13.1":"2026-05-14T02:39:55.106Z","0.14.0":"2026-05-14T17:35:17.935Z","0.15.0":"2026-05-14T19:39:56.429Z","0.15.1":"2026-05-15T04:27:33.266Z","0.15.2":"2026-05-23T00:13:49.941Z","0.15.3":"2026-05-23T00:40:44.006Z","0.15.4":"2026-05-25T17:06:25.533Z","0.15.5":"2026-05-25T18:07:08.252Z","0.15.6":"2026-05-27T23:42:41.482Z","0.16.0":"2026-05-29T00:48:19.280Z","0.16.4":"2026-05-30T15:04:53.932Z","0.16.5":"2026-05-31T21:06:13.461Z","0.17.0":"2026-05-31T21:10:10.695Z","0.17.1":"2026-05-31T21:38:51.685Z","0.18.0":"2026-06-01T01:59:35.383Z","0.18.1":"2026-06-01T02:11:15.584Z","0.18.2":"2026-06-02T18:14:36.979Z","0.18.3":"2026-06-02T18:18:49.360Z","1.0.0":"2026-06-03T15:37:54.471Z","1.1.0":"2026-06-05T02:33:37.026Z","1.1.1":"2026-06-05T02:56:39.265Z","1.2.0":"2026-06-05T19:40:59.583Z","1.2.1":"2026-06-05T20:07:02.024Z","1.2.4":"2026-06-07T02:51:18.897Z","1.2.5":"2026-06-07T23:15:42.824Z","1.2.8":"2026-06-09T02:48:57.697Z","1.2.9":"2026-06-09T17:09:05.166Z","1.3.0":"2026-07-13T17:29:31.250Z","1.4.0":"2026-07-13T20:27:30.533Z","1.5.0":"2026-07-14T03:44:04.284Z","1.5.1":"2026-07-16T17:33:06.583Z","1.5.2":"2026-07-31T01:49:56.924Z","1.6.0":"2026-08-20T20:38:56.295Z"},"bugs":{"url":"https://github.com/lateos-ai/npm-scan/issues"},"license":"Apache-2.0","homepage":"https://github.com/lateos-ai/npm-scan#readme","keywords":["npm","security","supply-chain","malware-detection","typosquat","dependency-confusion","obfuscation-detection","validated-detectors"],"repository":{"url":"git+https://github.com/lateos-ai/npm-scan.git","type":"git"},"description":"Production-grade npm supply chain vulnerability scanner. Detects 100% of 3 real May 2026 supply chain campaigns (dependency confusion, obfuscation, impersonation) with 0% false positive rate on top 1,000 npm packages.","maintainers":[{"name":"leochong","email":"lowmls@gmail.com"}],"readme":"README.md","readmeFilename":""}