TL;DR
NPMScan is a Model Context Protocol (MCP) server. Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups Install with: Remote MCP: https://npmscan.com/api/mcp. Source: https://github.com/salemalem/npmscan. It speaks the Model Context Protocol and works with any compatible client (Claude, Cursor, Cline, Windsurf, Warp and more).
NPMScan
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Install Command
Remote MCP: https://npmscan.com/api/mcpFrequently Asked Questions
NPMScan is a Model Context Protocol server that Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
You can install it by running the install command: `Remote MCP: https://npmscan.com/api/mcp`. It then becomes available to any MCP-compatible client such as Claude, Cursor, Cline, Windsurf.
The NPMScan MCP Server is compatible with any client that speaks the Model Context Protocol — including Claude, Cursor, Cline, Windsurf.
Check the project license on its repository before use.
Reviews
0 reviews· 0.0 average
No reviews yet. Be the first to share your experience.
Leave a review
Rating
Details
- Agent Rank
- 0.0
- License
- Last Updated
- Aug 12, 2026
- Languages
- —
Client Compatibility
Speaks the Model Context Protocol — works with any compatible client.