scanpack/dist/malicious-packages.json

Dependency scanner to detect unknown or malicious packages in Node.js and Bun projects

{
  "packages": [
    {
      "name": "xdater",
      "reason": "Package banned from npm for containing malicious scripts",
      "severity": "high"
    }
  ],
  "patterns": [
    {
      "pattern": ".*-malware",
      "reason": "Suspicious pattern for malicious packages",
      "severity": "high"
    },
    {
      "pattern": ".*-virus",
      "reason": "Suspicious pattern for malicious packages",
      "severity": "high"
    }
  ]
}