NPM

NPM Supply-Chain Impact Heatmap

Area uses the selected size metric. Color shows confirmed evidence. Data loads from data/npm-impact.json.

JSON

Loading impact data...

Small red area. Large operational consequence.

The heatmap ranks npm packages by modeled impact, then overlays direct malicious-release evidence and staged exposure from the scanner snapshot.

Evidence Distribution

Confirmed evidence is rare in the top-impact set, but the packages that light up can carry enormous download and dependency surfaces.

Size Top

Color No known hit Staged exposure Confirmed release Credential/install indicators

Green shades: darker green means smaller ; brighter green means larger blast radius.

No packages match the current filters.

Package

Select a tile in the heatmap.

Evidence