shyngys-shynbolatov

Security analysis for npm packages, built for AI agents and developer tools. NPMScan helps agents inspect npm packages before installation by checking for: - Suspicious install scripts - Obfuscated or potentially malicious code - Credential and environment-variable access - Network and data-exfiltration indicators - Known vulnerabilities - Maintainer and ownership changes - Risky package updates and version differences Use this MCP server to investigate package risk, compare versions, and mak