NPMScan

Get latest npm security advisories

get_latest_advisories

Read-only

Browse recently published npm security advisories and known-malicious-package findings. Three disjoint sources, selected via type: "reviewed" (default) is GitHub's curated, mostly CVE-backed advisories; "malware" is GitHub's own known-malicious-package advisories; "osv" is OSV.dev's OpenSSF malicious-packages feed, which covers far more malicious npm packages than GitHub ever republishes under a GHSA id. None of "malware"/"osv" carry a CVE or meaningful CWE beyond "embedded malicious code". Filter by severity, vulnerability category (XSS, SQL/NoSQL Injection, SSRF, Access Control, Code Injection, etc. — reviewed only), an affected package name, or (reviewed/malware only) look up one exact advisory by GHSA or CVE ID. Paginated with an opaque cursor: pass a previous response's nextCursor back in as cursor to fetch the next page.

Input Schema

TableJSON Schema

Name	Required	Description
`type`	No	Advisory source: "reviewed" (curated CVE-style, default), "malware" (GitHub-curated known-malicious packages), or "osv" (OSV.dev/OpenSSF malicious-packages feed)
`cveId`	No	Look up one exact advisory by its CVE ID (e.g. "CVE-2024-12345") — reviewed/malware only
`cursor`	No	Opaque pagination cursor from a previous response's nextCursor, to fetch the next page
`ghsaId`	No	Look up one exact advisory by its GHSA ID (e.g. "GHSA-xxxx-xxxx-xxxx") — reviewed/malware only
`affects`	No	Filter to advisories affecting this npm package name
`category`	No	Filter by vulnerability category (reviewed only). One of: access-control, dos, xss, ssrf, auth, code-injection, info-exposure, path-traversal, input-validation, prototype-pollution, command-injection, sqli, crypto, race-condition, open-redirect, csrf, crlf-injection, xml-injection, malicious-code, deserialization
`severity`	No	Filter by severity (default all; not applicable to "malware"/"osv")
`direction`	No	Sort by published date, newest or oldest first (default desc)

Output Schema

TableJSON Schema

Name	Required	Description	Default
`type`	Yes
`category`	Yes
`severity`	Yes
`direction`	Yes
`advisories`	Yes
`nextCursor`	Yes

Schema Changelog

Changes observed during successful MCP inspections.

Changed7 schema fields changedSep 8, 2026

changedInput schema / properties / category / description

Previous value: -"Filter by vulnerability category. One of: access-control, dos, xss, ssrf, auth, code-injection, info-exposure, path-traversal, input-validation, prototype-pollution, command-injection, sqli, crypto, race-condition, open-redirect, csrf, crlf-injection, xml-injection, malicious-code, deserialization"New value: +"Filter by vulnerability category (reviewed only). One of: access-control, dos, xss, ssrf, auth, code-injection, info-exposure, path-traversal, input-validation, prototype-pollution, command-injection, sqli, crypto, race-condition, open-redirect, csrf, crlf-injection, xml-injection, malicious-code, deserialization"

changedInput schema / properties / cveId / description

Previous value: -"Look up one exact advisory by its CVE ID (e.g. \"CVE-2024-12345\")"New value: +"Look up one exact advisory by its CVE ID (e.g. \"CVE-2024-12345\") — reviewed/malware only"

changedInput schema / properties / ghsaId / description

Previous value: -"Look up one exact advisory by its GHSA ID (e.g. \"GHSA-xxxx-xxxx-xxxx\")"New value: +"Look up one exact advisory by its GHSA ID (e.g. \"GHSA-xxxx-xxxx-xxxx\") — reviewed/malware only"

changedInput schema / properties / severity / description

Previous value: -"Filter by severity (default all)"New value: +"Filter by severity (default all; not applicable to \"malware\"/\"osv\")"

changedInput schema / properties / type / description

Previous value: -"Advisory source: \"reviewed\" (curated CVE-style, default) or \"malware\" (known-malicious packages)"New value: +"Advisory source: \"reviewed\" (curated CVE-style, default), \"malware\" (GitHub-curated known-malicious packages), or \"osv\" (OSV.dev/OpenSSF malicious-packages feed)"

changedInput schema / properties / type / enum

Previous value: -[
-  "reviewed",
-  "malware"
-]New value: +[
+  "reviewed",
+  "malware",
+  "osv"
+]

changedOutput schema / properties / type / enum

Previous value: -[
-  "reviewed",
-  "malware"
-]New value: +[
+  "reviewed",
+  "malware",
+  "osv"
+]

Changed3 schema fields changedSep 7, 2026

addedInput schema / properties / type

Added value: +{
+  "description": "Advisory source: \"reviewed\" (curated CVE-style, default) or \"malware\" (known-malicious packages)",
+  "enum": [
+    "reviewed",
+    "malware"
+  ],
+  "type": "string"
+}

addedOutput schema / properties / type

Added value: +{
+  "enum": [
+    "reviewed",
+    "malware"
+  ],
+  "type": "string"
+}

changedOutput schema / required

Previous value: -[
-  "severity",
-  "category",
-  "direction",
-  "nextCursor",
-  "advisories"
-]New value: +[
+  "type",
+  "severity",
+  "category",
+  "direction",
+  "nextCursor",
+  "advisories"
+]

Changed1 schema field changedSep 1, 2026

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "advisories": {
+      "items": {
+        "additionalProperties": false,
+        "properties": {
+          "categories": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "cve": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "cwes": {
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "id": {
+                  "type": "string"
+                },
+                "name": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "id",
+                "name"
+              ],
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "ghsaUrl": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "npmscanUrl": {
+            "type": "string"
+          },
+          "packages": {
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "affectedRange": {
+                  "type": [
+                    "string",
+                    "null"
+                  ]
+                },
+                "name": {
+                  "type": "string"
+                },
+                "patchedVersion": {
+                  "type": [
+                    "string",
+                    "null"
+                  ]
+                }
+              },
+              "required": [
+                "name",
+                "affectedRange",
+                "patchedVersion"
+              ],
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "publishedAt": {
+            "type": "string"
+          },
+          "severity": {
+            "type": "string"
+          },
+          "summary": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "cve",
+          "summary",
+          "severity",
+          "publishedAt",
+          "ghsaUrl",
+          "npmscanUrl",
+          "cwes",
+          "categories",
+          "packages"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "category": {
+      "enum": [
+        "all",
+        "access-control",
+        "dos",
+        "xss",
+        "ssrf",
+        "auth",
+        "code-injection",
+        "info-exposure",
+        "path-traversal",
+        "input-validation",
+        "prototype-pollution",
+        "command-injection",
+        "sqli",
+        "crypto",
+        "race-condition",
+        "open-redirect",
+        "csrf",
+        "crlf-injection",
+        "xml-injection",
+        "malicious-code",
+        "deserialization"
+      ],
+      "type": "string"
+    },
+    "direction": {
+      "enum": [
+        "asc",
+        "desc"
+      ],
+      "type": "string"
+    },
+    "nextCursor": {
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "severity": {
+      "enum": [
+        "critical",
+        "high",
+        "medium",
+        "low",
+        "all"
+      ],
+      "type": "string"
+    }
+  },
+  "required": [
+    "severity",
+    "category",
+    "direction",
+    "nextCursor",
+    "advisories"
+  ],
+  "type": "object"
+}

Changed7 schema fields changedAug 6, 2026

addedInput schema / properties / affects

Added value: +{
+  "description": "Filter to advisories affecting this npm package name",
+  "maxLength": 214,
+  "type": "string"
+}

addedInput schema / properties / category

Added value: +{
+  "description": "Filter by vulnerability category. One of: access-control, dos, xss, ssrf, auth, code-injection, info-exposure, path-traversal, input-validation, prototype-pollution, command-injection, sqli, crypto, race-condition, open-redirect, csrf, crlf-injection, xml-injection, malicious-code, deserialization",
+  "enum": [
+    "access-control",
+    "dos",
+    "xss",
+    "ssrf",
+    "auth",
+    "code-injection",
+    "info-exposure",
+    "path-traversal",
+    "input-validation",
+    "prototype-pollution",
+    "command-injection",
+    "sqli",
+    "crypto",
+    "race-condition",
+    "open-redirect",
+    "csrf",
+    "crlf-injection",
+    "xml-injection",
+    "malicious-code",
+    "deserialization"
+  ],
+  "type": "string"
+}

addedInput schema / properties / cursor

Added value: +{
+  "description": "Opaque pagination cursor from a previous response's nextCursor, to fetch the next page",
+  "type": "string"
+}

addedInput schema / properties / cveId

Added value: +{
+  "description": "Look up one exact advisory by its CVE ID (e.g. \"CVE-2024-12345\")",
+  "type": "string"
+}

addedInput schema / properties / direction

Added value: +{
+  "description": "Sort by published date, newest or oldest first (default desc)",
+  "enum": [
+    "asc",
+    "desc"
+  ],
+  "type": "string"
+}

addedInput schema / properties / ghsaId

Added value: +{
+  "description": "Look up one exact advisory by its GHSA ID (e.g. \"GHSA-xxxx-xxxx-xxxx\")",
+  "type": "string"
+}

removedInput schema / properties / page

Removed value: -{
-  "description": "Page number (default 1)",
-  "maximum": 50,
-  "minimum": 1,
-  "type": "integer"
-}

First observedAug 1, 2026

TDQS

A4.6/5.0

Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, and destructiveHint=false, but the description adds substantial behavioral context beyond that: the opaque-cursor pagination contract (pass nextCursor back as cursor), the disjoint-source semantics, and the fact that malware/osv advisories lack CVE/CWE. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long (~120 words) but every sentence earns its place given the 8-parameter, 3-source complexity. It front-loads the purpose before diving into source semantics and pagination. Dense but not padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex tool with 8 parameters, 3 sources, source-specific filter constraints, and pagination, the description covers everything an agent needs to call it correctly: source selection, filter applicability per source, exact-ID lookup scoping, and cursor mechanics. An output schema exists, so return-value documentation isn't the description's burden.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all 8 parameters — baseline 3. The description adds meaning beyond the schema by clarifying the interplay: category is reviewed-only, severity is not applicable to malware/osv, and cveId/ghsaId work only for reviewed/malware. This cross-parameter guidance is genuinely additive.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb+resource ('Browse recently published npm security advisories and known-malicious-package findings') and immediately distinguishes the three disjoint sources. It clearly differentiates from siblings like query_vulnerabilities and get_cve by framing this as a browsing/filtering tool rather than a general vulnerability lookup.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Excellent guidance on when to use each 'type' value — explaining that 'reviewed' is the curated CVE-backed default, 'malware' is GitHub's own findings, and 'osv' covers far more malicious packages than GitHub republishes. It also notes source-specific limitations (malware/osv carry no CVE or meaningful CWE). It doesn't explicitly name sibling tools as alternatives (e.g., when to use get_cve for a single CVE), but the internal routing guidance is strong.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All NPMScan tools Inspect

Try in Browser

RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources

Need Help?