jsDelivr
jsDelivr is a large free, open-source CDN that serves JavaScript and CSS packages — including directly from npm and GitHub — to millions of sites. It is detected from cdn.jsdelivr.net asset URLs.
As with any public package CDN, every dependent site trusts the served file. Verifying loaded assets against known-good fingerprints is what separates a normal dependency from a supply-chain compromise.
Commonly deployed alongside jsDelivr
Of the 14,526 public scans where jsDelivr was detected, these are the technologies most often present on the same site. The share is the percentage of jsDelivr sites that also ran each one.
| Technology | Category | Share of jsDelivr sites |
|---|---|---|
| jQuery | wappalyzer | 53.72% |
| Google Analytics | wappalyzer | 52.54% |
| Open-Graph-Protocol | miscellaneous | 45.12% |
| Cloudflare | wappalyzer | 42.8% |
| JQuery | miscellaneous | 37.75% |
| HTTP/3 | wappalyzer | 32.05% |
| HSTS | wappalyzer | 29.9% |
| Google Tag Manager | wappalyzer | 26.87% |
| X-UA-Compatible | miscellaneous | 26.75% |
| Cloudflare Bot Management | wappalyzer | 26.43% |
| MetaGenerator | miscellaneous | 24.06% |
| PHP | wappalyzer | 23.06% |
| cdnjs | wappalyzer | 21.95% |
| Google-Analytics | miscellaneous | 21.52% |
How ScanMalware detects jsDelivr
jsDelivr is detected by analysing the response headers, HTML markup, JavaScript runtime and asset URLs captured when ScanMalware loads the site in a real headless browser.
From any scan you can pivot into related signals — JARM TLS fingerprints, ASN ownership and BGP routing, certificate history, JavaScript analysis and the overall security verdict — to understand not just that jsDelivr is present, but how it is being used. Open the full search interface for jsDelivr →
Recent public scans featuring jsDelivr
A rolling sample of recent public scans where jsDelivr was detected. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| EV Charger Installation Christchurch | EWRB-Registered Electricians | Fixed-Price Quotes https://evchargerchristchurch.pages.dev/type-1-ev-charger-installation-avondale.html | 2026-08-04 |
| HDFC Bank — Mobile Banking App https://www.bobv3.vercel.app/ | 2026-08-04 |
| Missouri Chamber Supports Essential Election Integrity Reform | Missouri Chamber https://mochamber.com/news-archive/missouri-chamber-supports-essential-election-integrity-… | 2026-08-04 |
| What You Need to Know About Amendments 4 and 5 - Pathways to Independence https://ptistl.org/2026/07/missouri-amendments-4-and-5-voter-information/ | 2026-08-04 |
| Gestión del tiempo adaptado a la legalidad con Woffu https://woffu.com | 2026-08-04 |
| Major Satellite Internet Provider Hughes Network Systems Prepares Chapter 11 Bankruptcy | JQJO https://jqjo.com/2026-07-31/us/business/en/Major-Satellite-Internet-Provider-Hughes-Networ… | 2026-08-04 |
| Spider Identification & Prevention Tips | Pest Library https://www.pestandtermiteconsultants.com/pest-library/spiders | 2026-08-04 |
| Spiders Facts for Kids - 5 Scary Facts about Spiders - LearningMole https://learningmole.com/spiders-facts-for-kids/ | 2026-08-04 |
Frequently asked questions about jsDelivr
- Does using jsDelivr mean a website is unsafe?
- No. jsDelivr is a stack component, not a verdict. ScanMalware scores the whole page — its scripts, redirects, certificates, threat-intelligence matches and behaviour — so a site using jsDelivr can be perfectly safe or actively malicious.
- How many sites using jsDelivr has ScanMalware scanned?
- jsDelivr has been detected in 14,526 public scans on ScanMalware.com. Each scan is a real headless-browser visit, and the figure updates as new URLs are submitted.
- What technologies are commonly used with jsDelivr?
- Across scanned sites, jsDelivr is most often seen alongside jQuery, Google Analytics and Open-Graph-Protocol. The full co-occurrence breakdown is listed on this page.
Browse all profiled technologies on the technology index, or scan a URL to see its full stack.