NPMScan

Get latest npm security advisories

get_latest_advisories

Read-only

Browse recently published npm security advisories and known-malicious-package findings. Three disjoint sources, selected via type: "reviewed" (default) is GitHub's curated, mostly CVE-backed advisories; "malware" is GitHub's own known-malicious-package advisories; "osv" is OSV.dev's OpenSSF malicious-packages feed, a separate dataset whose entries use MAL-/OSV ids rather than GHSA ids. None of "malware"/"osv" carry a CVE or meaningful CWE beyond "embedded malicious code". Filter by severity, vulnerability category (XSS, SQL/NoSQL Injection, SSRF, Access Control, Code Injection, etc. — reviewed only), an affected package name, or (reviewed/malware only) look up one exact advisory by GHSA or CVE ID. Paginated with an opaque cursor: pass a previous response's nextCursor back in as cursor to fetch the next page.

Input Schema

TableJSON Schema

Name	Required	Description
`type`	No	Advisory source: "reviewed" (curated CVE-style, default), "malware" (GitHub-curated known-malicious packages), or "osv" (OSV.dev/OpenSSF malicious-packages feed)
`cveId`	No	Look up one exact advisory by its CVE ID (e.g. "CVE-2024-12345") — reviewed/malware only
`cursor`	No	Opaque pagination cursor from a previous response's nextCursor, to fetch the next page
`ghsaId`	No	Look up one exact advisory by its GHSA ID (e.g. "GHSA-xxxx-xxxx-xxxx") — reviewed/malware only
`affects`	No	Filter to advisories affecting this npm package name
`category`	No	Filter by vulnerability category (reviewed only). One of: access-control, dos, xss, ssrf, auth, code-injection, info-exposure, path-traversal, input-validation, prototype-pollution, command-injection, sqli, crypto, race-condition, open-redirect, csrf, crlf-injection, xml-injection, malicious-code, deserialization
`severity`	No	Filter by severity (default all; not applicable to "malware"/"osv")
`direction`	No	Sort by published date, newest or oldest first (default desc)

Output Schema

TableJSON Schema

Name	Required	Description	Default
`type`	Yes
`category`	Yes
`severity`	Yes
`direction`	Yes
`advisories`	Yes
`nextCursor`	Yes

Schema Changelog

Changes observed during successful MCP inspections.

Changed7 schema fields changedSep 8, 2026

changedInput schema / properties / category / description

Previous value: -"Filter by vulnerability category. One of: access-control, dos, xss, ssrf, auth, code-injection, info-exposure, path-traversal, input-validation, prototype-pollution, command-injection, sqli, crypto, race-condition, open-redirect, csrf, crlf-injection, xml-injection, malicious-code, deserialization"New value: +"Filter by vulnerability category (reviewed only). One of: access-control, dos, xss, ssrf, auth, code-injection, info-exposure, path-traversal, input-validation, prototype-pollution, command-injection, sqli, crypto, race-condition, open-redirect, csrf, crlf-injection, xml-injection, malicious-code, deserialization"

changedInput schema / properties / cveId / description

Previous value: -"Look up one exact advisory by its CVE ID (e.g. \"CVE-2024-12345\")"New value: +"Look up one exact advisory by its CVE ID (e.g. \"CVE-2024-12345\") — reviewed/malware only"

changedInput schema / properties / ghsaId / description

Previous value: -"Look up one exact advisory by its GHSA ID (e.g. \"GHSA-xxxx-xxxx-xxxx\")"New value: +"Look up one exact advisory by its GHSA ID (e.g. \"GHSA-xxxx-xxxx-xxxx\") — reviewed/malware only"

changedInput schema / properties / severity / description

Previous value: -"Filter by severity (default all)"New value: +"Filter by severity (default all; not applicable to \"malware\"/\"osv\")"

changedInput schema / properties / type / description

Previous value: -"Advisory source: \"reviewed\" (curated CVE-style, default) or \"malware\" (known-malicious packages)"New value: +"Advisory source: \"reviewed\" (curated CVE-style, default), \"malware\" (GitHub-curated known-malicious packages), or \"osv\" (OSV.dev/OpenSSF malicious-packages feed)"

changedInput schema / properties / type / enum

Previous value: -[
-  "reviewed",
-  "malware"
-]New value: +[
+  "reviewed",
+  "malware",
+  "osv"
+]

changedOutput schema / properties / type / enum

Previous value: -[
-  "reviewed",
-  "malware"
-]New value: +[
+  "reviewed",
+  "malware",
+  "osv"
+]

Changed3 schema fields changedSep 8, 2026

addedInput schema / properties / type

Added value: +{
+  "description": "Advisory source: \"reviewed\" (curated CVE-style, default) or \"malware\" (known-malicious packages)",
+  "enum": [
+    "reviewed",
+    "malware"
+  ],
+  "type": "string"
+}

addedOutput schema / properties / type

Added value: +{
+  "enum": [
+    "reviewed",
+    "malware"
+  ],
+  "type": "string"
+}

changedOutput schema / required

Previous value: -[
-  "severity",
-  "category",
-  "direction",
-  "nextCursor",
-  "advisories"
-]New value: +[
+  "type",
+  "severity",
+  "category",
+  "direction",
+  "nextCursor",
+  "advisories"
+]

Changed1 schema field changedSep 1, 2026

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "advisories": {
+      "items": {
+        "additionalProperties": false,
+        "properties": {
+          "categories": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "cve": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "cwes": {
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "id": {
+                  "type": "string"
+                },
+                "name": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "id",
+                "name"
+              ],
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "ghsaUrl": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "npmscanUrl": {
+            "type": "string"
+          },
+          "packages": {
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "affectedRange": {
+                  "type": [
+                    "string",
+                    "null"
+                  ]
+                },
+                "name": {
+                  "type": "string"
+                },
+                "patchedVersion": {
+                  "type": [
+                    "string",
+                    "null"
+                  ]
+                }
+              },
+              "required": [
+                "name",
+                "affectedRange",
+                "patchedVersion"
+              ],
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "publishedAt": {
+            "type": "string"
+          },
+          "severity": {
+            "type": "string"
+          },
+          "summary": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "cve",
+          "summary",
+          "severity",
+          "publishedAt",
+          "ghsaUrl",
+          "npmscanUrl",
+          "cwes",
+          "categories",
+          "packages"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "category": {
+      "enum": [
+        "all",
+        "access-control",
+        "dos",
+        "xss",
+        "ssrf",
+        "auth",
+        "code-injection",
+        "info-exposure",
+        "path-traversal",
+        "input-validation",
+        "prototype-pollution",
+        "command-injection",
+        "sqli",
+        "crypto",
+        "race-condition",
+        "open-redirect",
+        "csrf",
+        "crlf-injection",
+        "xml-injection",
+        "malicious-code",
+        "deserialization"
+      ],
+      "type": "string"
+    },
+    "direction": {
+      "enum": [
+        "asc",
+        "desc"
+      ],
+      "type": "string"
+    },
+    "nextCursor": {
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "severity": {
+      "enum": [
+        "critical",
+        "high",
+        "medium",
+        "low",
+        "all"
+      ],
+      "type": "string"
+    }
+  },
+  "required": [
+    "severity",
+    "category",
+    "direction",
+    "nextCursor",
+    "advisories"
+  ],
+  "type": "object"
+}

Changed7 schema fields changedAug 6, 2026

addedInput schema / properties / affects

Added value: +{
+  "description": "Filter to advisories affecting this npm package name",
+  "maxLength": 214,
+  "type": "string"
+}

addedInput schema / properties / category

Added value: +{
+  "description": "Filter by vulnerability category. One of: access-control, dos, xss, ssrf, auth, code-injection, info-exposure, path-traversal, input-validation, prototype-pollution, command-injection, sqli, crypto, race-condition, open-redirect, csrf, crlf-injection, xml-injection, malicious-code, deserialization",
+  "enum": [
+    "access-control",
+    "dos",
+    "xss",
+    "ssrf",
+    "auth",
+    "code-injection",
+    "info-exposure",
+    "path-traversal",
+    "input-validation",
+    "prototype-pollution",
+    "command-injection",
+    "sqli",
+    "crypto",
+    "race-condition",
+    "open-redirect",
+    "csrf",
+    "crlf-injection",
+    "xml-injection",
+    "malicious-code",
+    "deserialization"
+  ],
+  "type": "string"
+}

addedInput schema / properties / cursor

Added value: +{
+  "description": "Opaque pagination cursor from a previous response's nextCursor, to fetch the next page",
+  "type": "string"
+}

addedInput schema / properties / cveId

Added value: +{
+  "description": "Look up one exact advisory by its CVE ID (e.g. \"CVE-2024-12345\")",
+  "type": "string"
+}

addedInput schema / properties / direction

Added value: +{
+  "description": "Sort by published date, newest or oldest first (default desc)",
+  "enum": [
+    "asc",
+    "desc"
+  ],
+  "type": "string"
+}

addedInput schema / properties / ghsaId

Added value: +{
+  "description": "Look up one exact advisory by its GHSA ID (e.g. \"GHSA-xxxx-xxxx-xxxx\")",
+  "type": "string"
+}

removedInput schema / properties / page

Removed value: -{
-  "description": "Page number (default 1)",
-  "maximum": 50,
-  "minimum": 1,
-  "type": "integer"
-}

First observedAug 1, 2026

TDQS

A4.6/5.0

Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations cover read-only/open-world; the description adds significant context beyond annotations: the disjoint dataset semantics, different ID schemes (MAL-/OSV vs GHSA), absence of CVE/CWE in malware/osv feeds, and pagination via opaque cursor.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads purpose and source breakdown, then filters and pagination. Dense but each sentence carries distinct, decision-relevant information; no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return format needn't be explained. The description compensates fully for the tool's inherent complexity: three heterogeneous datasets, ID formats, filter applicability, and pagination semantics.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description raises it by clarifying default values, mutual applicability (category reviewed-only, severity not applicable to malware/osv), and the cursor round-trip contract ('pass nextCursor back as cursor').

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Browse recently published npm security advisories and known-malicious-package findings') and immediately explains the three disjoint sources, which distinguishes it from siblings like query_vulnerabilities or get_cve.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Clearly explains when each source type applies and that lookups by GHSA/CVE are reviewed/malware only. Does not explicitly name alternative sibling tools, but the source semantics provide strong usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All NPMScan tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources

Need Help?