io.github.salemalem/npmscan
NPMScan
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
timeout probed 2026-10-15 · HTTP 200
probe timed out after 15000 ms
- Endpoint
- https://npmscan.com/api/mcp (streamable-http)
- Host
- npmscan.com
- Protocol
- 2025-11-25
- Reports itself as
- npmscan 3.1.3
- Capabilities
- tools
- Repository
- https://github.com/salemalem/npmscan-mcp-plugin
- Website
- https://npmscan.com
- Registry
- active, updated 2026-10-10 · registry entry
- Reachable
- 11 of the last 11 probes
History
We add a row when the result changes. A server with no change keeps its last row.
| Probed | Result | Init | Tools | Claude | o200k |
|---|---|---|---|---|---|
| 2026-10-14 09:35 | alive | 254 ms | 23 | 21k | 12k |
| 2026-10-11 10:36 | alive | 1.6 s | 23 | 21k | 12k |
| 2026-10-10 10:30 | alive | 1.6 s | 23 | 21k | 12k |
| 2026-10-07 11:22 | alive | 1.1 s | 23 | 21k | 12k |
| 2026-10-06 11:02 | alive | 703 ms | 23 | 25k | 15k |
| 2026-10-05 15:37 | alive | 246 ms | 23 | 25k | 15k |
| 2026-10-05 00:46 | alive | 193 ms | 23 | 25k | 15k |
| 2026-10-04 10:07 | alive | 1.6 s | 23 | 15k | |
| 2026-10-04 08:00 | alive | 1.7 s | 23 | 15k | |
| 2026-10-03 20:39 | alive | 1.2 s | 23 | 15k | |
| 2026-10-03 17:55 | alive | 451 ms | 23 | 15k |
Badge and feed
[](https://mcpcost.ulehla.dev/s/io.github.salemalem/npmscan)
An entry for every probe that changed the result, the tool count or the token cost: Atom feed. Add it to a feed reader or a Slack RSS app to hear when the server stops answering or its tool set grows.