Package Supply-Chain Monitor — npm & PyPI Intel

Watch the open-source supply chain for new packages and typosquat attacks — keyless, via the official npm and PyPI feeds. The same kind of alert services like Socket.dev and Snyk sell, at $0.001 per row.

Who it's for

• Security & platform teams — flag typosquat lookalikes of your packages before they're installed
• Maintainers — track your own packages' metadata, downloads, and release cadence
• Researchers & threat-intel — firehose of everything new hitting the registries

What it does

Mode	What it does
new	The newest packages hitting npm (registry changes feed) and PyPI (new-packages RSS) — names, versions, maintainers, descriptions
search	Full metadata + weekly download counts for any npm or PyPI package
watch	Typosquat alerts — polls the newest packages and flags any name within edit-distance 2 of your target list (react, lodash, requests...)

Schedule watch and get a daily alert whenever a new package tries to impersonate the ones your team depends on — the #1 supply-chain attack vector.

Example inputs

{ "mode": "new", "limit": 150 }
{ "mode": "search", "packages": ["requests", "axios", "lodash"] }
{ "mode": "watch", "watchTargets": ["mypackage", "requests", "lodash"], "limit": 300 }

Example row

{
  "recordType": "typosquat_alert",
  "registry": "npm",
  "name": "lodashjs",
  "similarTo": "lodash",
  "editDistance": 2,
  "version": "1.0.0",
  "maintainers": ["anon-user"],
  "url": "https://www.npmjs.com/package/lodashjs"
}

Example output

{
  "recordType": "package_event", "name": "lodash-es", "ecosystem": "npm",
  "version": "4.17.22", "event": "new_version",
  "downloads7d": 42000000, "publisher": "jdalton",
  "scrapedAt": "2026-11-03T12:00:00+00:00"
}

Pricing

$0.001 per row — no subscription.

More from this developer

• Resale Radar — Poshmark + Depop + Grailed sniper feed
• Vinted Monitor — EU resale listings & sniper alerts
• YouTube Transcript Engine — batch subtitles & captions for AI pipelines
• Gov Contract Monitor — SAM.gov opportunities + federal awards
• SEC 13F Monitor — institutional fund holdings (Berkshire, ARK...)
• DFS Props Monitor — player prop lines & line-movement alerts
• Capitol Trades Monitor — Congress stock-trade alerts (STOCK Act PTRs)
• Perp DEX Monitor — Lighter/Aster/Pacifica funding & spreads
• Hyperliquid Monitor — funding rates, OI & whale-position tracking
• DeFiLlama Monitor — DeFi TVL, yield pools & protocol watch
• Crypto Market Monitor — CoinGecko trending, movers & price watch
• TradingView Screener — market scan & TA alerts (gainers/oversold/buy-rated)
• Hiring Signal Monitor — company hiring velocity & job-board intel
• Investor Edge Monitor — earnings, IPOs, insiders & SEC filings feed
• Noon Monitor — noon.com price tracking & deals
• Discord Directory Monitor — discord server discovery & growth
• Municipal Data Monitor — business licenses & permits across US cities
• ImportYeti Monitor — supply-chain intel from US import data