NPMScan MCP server

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Category: Dev tools

● Online, checked 86 min ago · 382 ms

Source: official MCP Registry entry io.github.salemalem/npmscan · repository

Direct MCP URL and setup

CLAUDE CODE

claude mcp add --transport http io-github-salemalem-npmscan https://npmscan.com/api/mcp

CURSOR / VS CODE (mcp.json)

{ "mcpServers": { "io-github-salemalem-npmscan": { "url": "https://npmscan.com/api/mcp" } } }