Dev tools · alternatives · 2026
24 alternatives to Socket web extension – free NPM supply chain protection
Hey HN, I'm Arjun, an 18-year-old intern at Socket. I've been working on a project that I'm really excited to share with you all - a browser extension that makes it easier to check the security of NPM packages before you use them. You can try the extension on any Chromium-based browser or on Firefox. Chrome extension: https://chrome.google.com/webstore/detail/socket-security/jb... Firefox add-on: https://addons.mozilla.org/en-US/firefox/addon/socket-securi... Socket scans NPM packages for malware, vulnerabilities, code smell, and…
Socket web extension is a free browser extension for Chromium and Firefox that helps developers check the security of NPM packages before using them. It scans packages for malware, vulnerabilities, code smell, and… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Socket web extension – free NPM supply chain protection launched in 2023; newer entries below may have overtaken it.
- 1
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 2
- 3
Secure your JavaScript supply chain – block malware packages
2022 · socket.dev · its alternatives →
- 4
Hello HN! I'm the creator and solo developer of Extension.js, a development tool for browser extensions with built-in support for TypeScript, WebAssembly, React, and modern JavaScript. Developers use it to spend less time configuring the compilation config or learning new frameworks and more time actually writing code. Most projects similar to Extension.js rely on some sort of abstraction or configuration to get started, making the initial development process slow given the extra learning curve and setup guidelines. By using Extension.js, adding the package to your npm scripts is all it…
2024 · github.com · its alternatives →
- 5
Bring confidence and security to your Web3 transactions
2024 · web3antivirus.io · its alternatives →
- 6
Build cross browser extensions for Chrome, Firefox & Opera
2017 · its alternatives →
- 7
This is the entire Firefox browser rendering to a element. Gecko, all UI components, and the Spidermonkey JS engine are all compiled and running in WebAssembly. Here are a few things you might find interesting: - This is fully end to end encrypted! We use the WISP protocol for TCP-over-websockets. - There is a novel WASM->JS JIT for experimental site speedup - This port cost over 25k in opus/fable tokens for debugging and JIT research This was just a fun experiment to push the boundaries of WebAssembly. For a more usable "browser in browser" experience, we also built…
Jul 2026 · developer.puter.com · its alternatives →
- 8
- 9
Track browser extension installations / threats in real-time
2019 · extensionmonitor.com · its alternatives →
- 10
This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…
Nov 2025 · github.com · its alternatives →
- 11
Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!
2025 · github.com · its alternatives →
- 12
Signed Pages▲75A browser extension to verify the authenticity of websites
2018 · github.com · its alternatives →
- 13
I built a Chrome extension that acts as a WebSocket proxy, allowing real-time monitoring, message simulation, and traffic interception. Think "Proxyman for WebSockets" but integrated into Chrome DevTools. Key features: Real-time WebSocket monitoring and message capture Send custom messages in both directions (client ↔ server) Block incoming/outgoing messages for testing Background monitoring (captures connections even when DevTools is closed) Why: I was debugging a WebSocket chat app and needed better tools than browser DevTools. Existing solutions required external proxies or were too…
2025 · websocket-devtools.com · its alternatives →
- 14
Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…
2025 · browsertotal.com · its alternatives →
- 15
ThreatSlayer▲85Free enterprise grade security for your personal browser
2023 · chromewebstore.google.com · its alternatives →
- 16
Real-time browser protection against secret and data leaks
Jun 2026 · securelint.in · its alternatives →
- 17
FlowLens▲134Hi HN, We often run into this with coding agents like Claude Code: debugging turns into copy-pasting logs, writing long explanations, and sharing screenshots. FlowLens is an MCP server plus a Chrome extension that captures browser context (video, console, network, user actions, storage) and makes it available to MCP-compatible agents like Claude Code. You can try it here: https://magentic.ai/flowlens Any feedback—good, bad, or brutal—is welcome.
Dec 2025 · magentic.ai · its alternatives →
- 18
A chrome extension tracks front-end JavaScript that uses DOM / jQuery APIs to manipulate html dom elements (e.g., change style, attach event listener) at runtime. - pilagod/js-tracker
2018 · github.com · its alternatives →
- 19
Protect yourself from crypto scams and frauds
2018 · uppward.sentinelprotocol.io · its alternatives →
- 20PM
2012 · proxino.com · its alternatives →
- 21
- 22
SafeToOpen▲81Anti-phishing extension that alerts you of dangerous sites
2021 · chromewebstore.google.com · its alternatives →
- 23
MetaShield▲102A chrome extension to keep your ETH & NFTs safe from scams
2021 · chromewebstore.google.com · its alternatives →
- 24
Keep your Python code secure and compliant with Socket
2023 · socket.dev · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →