Audits npm/pnpm/yarn projects against a known-bad package database. Detects compromised versions, banned packages, and malicious files in node_modules. Tracks active supply chain threats including Axios RAT and Shai-Hulud worms. Trigger phrases: "npm security", "supply chain audit", "check for compromised packages", mentions of Shai-Hulud or axios compromise.
