--- title: Introducing npm Package Search: Find Where Any Package... description: StepSecurity has launched npm Package Search, a tool that lets security teams trace any npm package back to the exact pull request where it was introduced... canonical: https://daily.dev/posts/introducing-npm-package-search-find-where-any-package-was-introduced-across-your-github-organizatio-gkkn3vcpw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Introducing npm Package Search: Find Where Any Package Was Introduced Across Your GitHub Organizations | daily.dev og:description: StepSecurity has launched npm Package Search, a tool that lets security teams trace any npm package back to the exact pull request where it was introduced... og:url: https://daily.dev/posts/introducing-npm-package-search-find-where-any-package-was-introduced-across-your-github-organizatio-gkkn3vcpw og:image: https://api.daily.dev/og/posts/gkKN3Vcpw.png og:image:alt: Introducing npm Package Search: Find Where Any Package Was Introduced Across Your GitHub Organizations og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Introducing npm Package Search: Find Where Any Package Was Introduced Across Your GitHub Organizations **[StepSecurity](https://daily.dev/sources/stepsecurity)** · 5 min read · 0 upvotes · 0 comments ## Summary StepSecurity has launched npm Package Search, a tool that lets security teams trace any npm package back to the exact pull request where it was introduced across GitHub organizations. Unlike traditional SCA tools that show current dependency state, it provides full historical context: which PRs added a package, who introduced it, and when. This is designed to accelerate incident response during supply chain attacks — like the Shai-Hulud worm or the Nx build system compromise — by turning hours of manual repository auditing into seconds of targeted queries. Use cases include blast radius assessment, dependency auditing, and developer activity correlation during compromises. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Behind the Scenes: How StepSecurity Detected and Helped Remediate the Largest npm Supply Chain Attack](https://daily.dev/posts/behind-the-scenes-how-stepsecurity-detected-and-helped-remediate-the-largest-npm-supply-chain-attac-uqccw38dz) · StepSecurity · 0 upvotes · 0 comments - [Introducing Secure Registry: install-time defense for the npm supply chain](https://daily.dev/posts/introducing-secure-registry-install-time-defense-for-the-npm-supply-chain-whugo2iji) · StepSecurity · 0 upvotes · 0 comments - [Maven Support Comes to GitHub Checks and OSS Package Search](https://daily.dev/posts/maven-support-comes-to-github-checks-and-oss-package-search-w2hg7p3fk) · StepSecurity · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/introducing-npm-package-search-find-where-any-package-was-introduced-across-your-github-organizatio-gkkn3vcpw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Introducing npm Package Search: Find Where Any Package Was Introduced Across Your GitHub Organizations","url":"https://daily.dev/posts/introducing-npm-package-search-find-where-any-package-was-introduced-across-your-github-organizatio-gkkn3vcpw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/introducing-npm-package-search-find-where-any-package-was-introduced-across-your-github-organizatio-gkkn3vcpw"},"datePublished":"2026-03-31T12:25:43.158Z","dateModified":"2026-03-31T12:36:04.660Z","description":"StepSecurity has launched npm Package Search, a tool that lets security teams trace any npm package back to the exact pull request where it was introduced...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e4e5661af5f91ef94947244463107b8a?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e4e5661af5f91ef94947244463107b8a?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"StepSecurity","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"StepSecurity","logo":"https://media.daily.dev/image/upload/s--vegWii-S--/f_auto,q_auto/v1774959924/logos/stepsecurity?_a=BAMAMiWQ0","url":"https://daily.dev/sources/stepsecurity"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/introducing-npm-package-search-find-where-any-package-was-introduced-across-your-github-organizatio-gkkn3vcpw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,npm","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"StepSecurity","item":"https://daily.dev/sources/stepsecurity"},{"@type":"ListItem","position":3,"name":"Introducing npm Package Search: Find Where Any Package Was Introduced Across Your GitHub Organizations"}]} ```