Detect malicious, vulnerable, or typosquatted npm packages from a conversation via npmscan.com's free, read-only MCP server.

GitHub stars
503

Install

/plugin install npmscan@npmscan

Run it inside Claude Code after adding the marketplace with /plugin marketplace add salemalem/npmscan-mcp-plugin.

Contents

Discovered from source

Skills 5

MCP servers 1

Sponsors

Details

Marketplace
salemalem/npmscan-mcp-plugin
Source
Category
security