<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: clopez programmer</title>
    <description>The latest articles on DEV Community by clopez programmer (@clopez_programmer_3fcbf30).</description>
    <link>https://dev.to/clopez_programmer_3fcbf30</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3866487%2F4c974d92-2855-47b0-b368-38c7110103ca.png</url>
      <title>DEV Community: clopez programmer</title>
      <link>https://dev.to/clopez_programmer_3fcbf30</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/clopez_programmer_3fcbf30"/>
    <language>en</language>
    <item>
      <title>I built Warden - a free security CLI to catch malicious npm packages</title>
      <dc:creator>clopez programmer</dc:creator>
      <pubDate>Tue, 07 Apr 2026 19:54:39 +0000</pubDate>
      <link>https://dev.to/clopez_programmer_3fcbf30/i-built-warden-a-free-security-cli-to-catch-malicious-npm-packages-3h8p</link>
      <guid>https://dev.to/clopez_programmer_3fcbf30/i-built-warden-a-free-security-cli-to-catch-malicious-npm-packages-3h8p</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F0ech5hegqkz9zxf8in6v.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F0ech5hegqkz9zxf8in6v.png" alt=" " width="411" height="112"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Hey! I just released Warden v2.0, a CLI tool that scans your Node.js dependencies for malicious packages,&lt;br&gt;&lt;br&gt;
  typosquatting, and supply chain attacks.                                                                              &lt;/p&gt;

&lt;p&gt;I got tired of not knowing if my dependencies were safe. npm audit shows CVEs, but what about packages hiding malware&lt;br&gt;
  with obfuscated code or stealing your AWS credentials? So I built this.&lt;/p&gt;

&lt;p&gt;What it does:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Scans node_modules for dangerous patterns (obfuscation, credential theft, system execution, etc.)&lt;/li&gt;
&lt;li&gt;Runs npm/pnpm/yarn audits with readable output
&lt;/li&gt;
&lt;li&gt;Monitors your network in real-time to see what your node processes are doing&lt;/li&gt;
&lt;li&gt;Checks for license compliance
&lt;/li&gt;
&lt;li&gt;Enforces security policies across your team
&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;All 100% local - no data leaves your machine.&lt;/p&gt;

&lt;p&gt;Try it:&lt;br&gt;&lt;br&gt;
  npm install -g warden-cli&lt;br&gt;
  warden scan .&lt;br&gt;
  warden monitor&lt;br&gt;
  warden doctor&lt;/p&gt;

&lt;p&gt;Feedback and contributions welcome!&lt;/p&gt;

&lt;p&gt;&lt;a href="https://github.com/camilolb/warden/" rel="noopener noreferrer"&gt;https://github.com/camilolb/warden/&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fysr1yrfjmriiuiyrmkk4.gif" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fysr1yrfjmriiuiyrmkk4.gif" alt=" " width="814" height="554"&gt;&lt;/a&gt;&lt;/p&gt;

</description>
      <category>cli</category>
      <category>node</category>
      <category>security</category>
      <category>showdev</category>
    </item>
  </channel>
</rss>
