NPMScan MCP
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
no price published
github.com/salemalem · 1 listed service · provider site
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Provider identity is derived from the domain or repository in the source record. If two vendors share a host, they appear together here — that is a limitation of the data, not a statement about ownership.