NPMSCan is a security analysis platform for JavaScript and Node.js ecosystems that helps developers and teams identify supply chain risks in npm packages. The platform scans npm dependencies to detect potentially malicious behavior such as suspicious install scripts, dependency takeovers, obfuscated code patterns, and abnormal package metadata changes. It is designed to complement traditional vulnerability scanners by focusing on supply chain and behavior-based risks rather than only CVE databases. NPMSCan is used by developers, security engineers, and organizations that want deeper visibility into third-party package risks before installing or deploying dependencies in production environments.