PlugMyPlugin
← Browse

plugin-claude-npm-bun-guard

OnyxynO ★ 1

This Claude Code plugin intercepts npm and bun package installations via a PreToolUse hook to block known malware (including transitive dependencies) and quarantine packages published within 3 days. It uses bash to resolve the full dependency tree with --dry-run and cross-references against a GitHub-sourced malware database updated daily.

Security DevOps No API key detected runs shell

Install

> /plugin marketplace add OnyxynO/plugin-claude-npm-bun-guard
> /plugin install plugin-claude-npm-bun-guard

Source: https://github.com/OnyxynO/plugin-claude-npm-bun-guard

What it's made of

1 hook

Commands
0
Agents
0
Skills
0
MCP servers
0
Hooks
1 · PreToolUse

What it needs & plugs into

API keys
none
Paid services
none detected
External tools
bash
Talks to
nothing external detected

Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (OnyxynO).