Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
all-the-package-names
Advanced tools
A list of all the public package names on npm. Updated daily.
Maintained by jsDelivr. Please consider becoming a sponsor to support us.
A list of all the public package names on npm.
npm install all-the-package-names --save
The module exports a big flat array of package names:
const names = require("all-the-package-names")
names.includes('superagent')
// => true
// Check if a given package name exists
names.includes('crazy-new-package-name')
// => false
names.length
// => 286289
names.filter(name => name.includes('banana'))
// => [ 'banana', 'banana-banana', 'banana-split', ...]
// Note: This example requires node 4 or greater because it uses
// const, arrow functions, and the `includes` array/string helper.
You can also use it on the command line. Newline-delimited names are piped to STDOUT:
npm i -g all-the-package-names
all-the-package-names | grep spell
Note that while mixed-case package names are no longer allowed to be published to the npm registry, there are over 2800 legacy mixed-case packages, many of which have the same spelling as other existing lowercase packages. See nice-registry/mixed-case-package-names for the the full list.
To avoid the mixed-case names when working with this data, just filter them out:
const names = require('all-the-package-names')
.filter(name => name === name.toLowerCase())
npm install
npm test
None
true
if the value is a number or string number. Useful for checking regex match results, user input, parsed strings, etc.MIT
FAQs
A list of all the public package names on npm. Updated daily.
The npm package all-the-package-names receives a total of 3,280 weekly downloads. As such, all-the-package-names popularity was classified as popular.
We found that all-the-package-names demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.