io.github.salemalem/npmscan

repo:https://github.com/salemalem/npmscan

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

transport:: remote
credential class:: open
repo:: https://github.com/salemalem/npmscan

Owner verification

Not yet verified. Verifying proves you control this server and is free, permanently — it never changes a published score.

Start verification →

Tools

batch_query_vulnerabilities
Query OSV.dev for known vulnerabilities across up to 100 npm packages at once — ideal for scanning a whole package.json/lockfile in one call.
shallow
get_latest_advisories
Browse recently published, reviewed GitHub Security Advisories for the npm ecosystem. Filter by severity, vulnerability category (XSS, SQL/NoSQL Injection, SSRF, Access Control, Code Injection, etc.), an affected package name, or look up one exact advisory by GHSA or CVE ID. Paginated with an opaque cursor: pass a previous response's nextCursor back in as cursor to fetch the next page.
shallow
get_package
Fetch npm registry metadata for a package: latest version, install scripts (preinstall/postinstall are a key risk signal), maintainers, license, and recent version history. Includes a link to the full npmscan.com analysis page.
shallow
get_package_version
Fetch registry metadata for one exact version of a package (dependencies, install scripts, tarball). Use this to check a version pinned in a lockfile rather than the latest release.
shallow
query_vulnerabilities
Query OSV.dev for known vulnerabilities affecting an npm package, optionally scoped to one version. Use before recommending or installing a package.
shallow
search_packages
Search the npm registry by name or keywords. Returns matching packages with a link to their full npmscan.com risk/analysis page.
shallow

Embed this server’s score

Tool count and median score across every tool in this server’s corpus — honest in a way a single cherry-picked tool’s badge wouldn’t be.

[![Vouch score](https://vouch.tools/api/servers/0fe6ed1c-36e2-4895-b2df-2b7cd73c51cf/badge.svg)](https://vouch.tools/servers/0fe6ed1c-36e2-4895-b2df-2b7cd73c51cf)