Check all enrolled developer machines for installed versions of a malicious npm package to assess exposure on independent laptops, complementing CI checks. Optionally filter by compromised versions.
Apache 2.0
261,244 tools. Last updated 2026-07-05 11:56
"A microservice to search for versions of npm packages" matching MCP tools:
- Retrieve full details of a security threat incident, including compromised package names, versions, and C2 domains/IPs. After listing incidents, use this to extract concrete IOCs and determine which exposure checks to run based on the ecosystem (npm or pypi).Apache 2.0
- Check up to 5 repos or packages in a single call to get trust assessments. Accepts any mix of formats including owner/repo, npm packages, and registry URLs.MIT
- Compare npm packages side-by-side by downloads, bundle size, dependencies, GitHub stars, and exported APIs to choose between alternatives.MIT
- Install npm dependencies for a Varity project. Specify packages or run full install after project creation.MIT
- Retrieve version details, available versions, and breaking changes for any npm package by specifying the package name and optional version range.MIT
Matching MCP Servers
- AlicenseCqualityDmaintenanceMCP server for searching npm packagesLast updated12716MIT
- AlicenseBqualityCmaintenanceMCP server for npm package management — publish, install, audit, search, security & dependency healthLast updated3830MIT
Matching MCP Connectors
npm MCP — wraps the npm Registry API (free, no auth)
npm package trends and weekly downloads over time. Free key at trendsmcp.ai
- Get project details: type, PHP version, core/CLI versions, composer packages, and apps.MIT
- Fetch detailed vulnerability information by CVE ID, including affected packages and versions, using the JFrog MCP Server API for comprehensive security analysis.Apache 2.0
- Search for NPM or Python packages by name to get repository URLs, check deprecation status, and compare alternatives. Returns direct links to source code for further exploration.TypeScriptMIT
- Audit dependency packages (npm, PyPI, Maven, etc.) against CVE database to find known vulnerabilities. Supports bulk queries of up to 50 packages.MIT
- Find Docker images and packages hosted on GitHub for specific users or organizations. Use this tool to discover available packages when you know the owner but need to locate their hosted resources.MIT
- Compare two or more exact npm or PyPI packages side by side using live registry metadata to verify claims about age, maintenance, and licenses.MIT
- Find Rust packages on crates.io by name or keywords to discover libraries for specific functionality, returning details like descriptions, versions, and download counts.MIT
- Check npm or PyPI packages for outdated versions, deprecation status, and cited breaking-change summaries since your current version, supporting time-sensitive AI agents.ISC
- Retrieve npm package documentation directly from registry README files to access installation instructions, usage examples, and API references for JavaScript/Node.js packages.MIT
- Retrieve package metadata from deps.dev: all versions, default version, and ecosystem for npm, PyPI, Go, Maven, Cargo, and NuGet packages.MIT
- Search for a package on PyPI or npm to retrieve metadata including version, description, license, homepage, and GitHub URL.MIT
- Retrieve a list of all npm packages available in the Prowpt platform catalog, excluding project-specific packages.MIT
- Search the Axint Registry for existing packages matching a natural-language query to reuse code instead of generating from scratch.Apache 2.0
- List all installed packages that provide Panel UI components to discover available packages for search, listing, and parameter operations.BSD 3-Clause