NPMScan
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
- All reviews:
- Release date:
- 10 October 2026
- Creator:
- Public project (github.com)
- Type:
- MCP
Sign in to add this product to your wishlist or follow its updates.
About NPMScan
NPMScan gives Claude read-only lookups of npm packages and vulnerabilities, backed by npmscan.com's free MCP server with no authentication. Claude can search the registry and check packages against OSV.dev and GitHub advisories before you install a dependency.
Details
- Version:
- 3.1.2
- Updated:
- 12 November 2026
- Verification:
- Not verified
- Repository:
- github.com/salemalem/npmscan-mcp-plugin
- Website:
- npmscan.com/
What it can do
The creator has not described the access yet.
Install NPMScan in Claude
An MCP connector links Claude to a service: Claude can then read or do things there for you, with your consent. It takes about two minutes.
- Add it to your libraryClick “Add to my library” on this page: it is free and instant.
- Copy the connector URLIn your library, select the product: its URL is shown with a “Copy” button.
- Add it in ClaudeIn Claude (website or app), open Settings › Connectors, click “Add custom connector”, give it a name and paste the URL.
- Connect your accountIf the service asks you to sign in (your Notion, GitHub… account), Claude opens its page: only grant the access you need.
- Use it in a conversationTurn the connector on in the conversation’s tools menu, then just ask for what you want.
Before adding a product, read its permissions above. You can remove a connector or skill at any time in Claude’s settings.
NPMScan: frequently asked questions
- Is NPMScan free?
- Yes. NPMScan is free: add it to your Claude Market library, no bank card needed.
- How do I install NPMScan in Claude?
- Add NPMScan to your library to get its URL. In Claude, open Settings › Connectors, click “Add custom connector” and paste the URL.
- Does NPMScan work with Claude Code?
- Yes. In a terminal, run claude mcp add --transport http followed by a name and the connector URL.
- Is NPMScan an official Anthropic product?
- No. NPMScan is a public project; this listing was created by Claude Market from its repository and the product is not hosted here. Claude Market is an independent project, not affiliated with Anthropic.
Reviews
Sign in then add or buy this product to review it (verified reviews).
No reviews yet. Only users who added or bought the product can review it.
Similar products
Security · MCPOffenseSecurity tools for coding agents: dependency advisory audits and evidence for remediation.No reviewsFree
Security · MCPGoSQLXSQL validation, formatting, parsing, metadata extraction, linting, and security analysis.No reviewsFree