"npm" matching MCP connectors:

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re

Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.

Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.