NPMScan
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
General capability
| Provider | salemalem |
|---|---|
| Owner | Not yet linked to a registered owner |
| Protocol | MCP |
| Version | 3.1.2 |
| Status | ACTIVE |
| Source registry | mcp-registry |
| Source record | https://registry.modelcontextprotocol.io/v0/servers/io.github.salemalem%2Fnpmscan |
| Repository | https://github.com/salemalem/npmscan-mcp-plugin |
| Website | https://npmscan.com |
| Authentication required | No |
| First seen by AgentGraph | 8/17/2026, 10:52:52 AM |
| Last seen by AgentGraph | 10/12/2026, 4:18:43 AM |
| Source last updated | 10/10/2026, 8:33:35 PM |
Transport
[
{
"url": "https://npmscan.com/api/mcp",
"kind": "remote",
"type": "streamable-http"
}
]This profile only shows information observed from the source registry. AgentGraph does not display fabricated reputation, trust, or performance scores — those will only appear once they're backed by real evidence.