Public threat report

npmjs.help

HIGHVerified

s***@npmjs.help

Saved Oct 5, 2025 · 95% confidence

Educational risk-check tool — not a mailbox scanner or a guarantee against phishing.

Phishing indicators

  • Domain has no DNS records indicating it is likely newly registered and potentially malicious.
  • Domain using TLD '.help' is uncommon for legitimate organizations, particularly when impersonating 'npmjs'.
  • Absence of SSL certificate suggests lack of secure communication.
  • Similar domain structure to npmjs.org raises suspicion of impersonation.

Think you received something similar? Run your own risk check.