Claude MarketplacesSubmit
salemalem avatar

salemalem/npmscan-mcp-plugin

Plugin marketplace

NPMScan: npm package and vulnerability lookups (search, maintainer/provenance/install-script inspection, license compliance, PR diffs, CI merge gates, SBOMs, OSV.dev + GitHub Security Advisories + NIST NVD/CVE) for Claude Code.

GitHub stars
503
plugin
1
last updated
Nov 11, 2026
View on GitHub

Add marketplace

/plugin marketplace add salemalem/npmscan-mcp-plugin

Run it inside Claude Code, then install plugins from it with /plugin.

Plugins

1npmscanDetect malicious, vulnerable, or typosquatted npm packages from a conversation via npmscan.com's free, read-only MCP server.

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/salemalem/npmscan-mcp-plugin
Categories
security
Listed since
Nov 11, 2026