Loading…
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
NPMScan is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 78/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding NPMScan to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.
mcp add io.github.salemalem/npmscan https://npmscan.com/api/mcpReview the upstream source before running this command.
{
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"isLatest": true,
"updatedAt": "2026-10-10T20:33:35.891696Z",
"publishedAt": "2026-10-10T20:33:35.891696Z",
"statusChangedAt": "2026-10-10T20:33:35.891696Z"
}
},
"server": {
"name": "io.github.salemalem/npmscan",
"icons": [
{
"src": "https://npmscan.com/npmscan.icon.png",
"sizes": [
"512x512"
],
"theme": "light",
"mimeType": "image/png"
},
{
"src": "https://npmscan.com/npmscan.icon.darkmode.png",
"sizes": [
"512x512"
],
"theme": "dark",
"mimeType": "image/png"
}
],
"title": "NPMScan",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://npmscan.com/api/mcp",
"type": "streamable-http"
}
],
"version": "3.1.2",
"repository": {
"url": "https://github.com/salemalem/npmscan-mcp-plugin",
"source": "github"
},
"websiteUrl": "https://npmscan.com",
"description": "Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups"
}
}