npmscan
claudecodexDetect malicious, vulnerable, or typosquatted npm packages from a conversation via npmscan.com's free, read-only MCP server.
5 skills · 1 MCP server
503
Plugin marketplace
NPMScan: npm package and vulnerability lookups (search, maintainer/provenance/install-script inspection, license compliance, PR diffs, CI merge gates, SBOMs, OSV.dev + GitHub Security Advisories + NIST NVD/CVE) for Claude Code.
Add this marketplace
Then install any plugin below by name — each page has its exact command.
Detect malicious, vulnerable, or typosquatted npm packages from a conversation via npmscan.com's free, read-only MCP server.
5 skills · 1 MCP server
Shows how many plugins this repo ships, and links here.