제공하는 Claude Code 플러그인 Claude 읽기 전용 npm 패키지 및 취약점 조회, 백업 npmscan.com의 무료, 무연 MCP 서버.

NPMScan은 ChatGPT와 Claude 모두 공식적으로 나열되어 있습니다. npmscan.com의 MCP 페이지, 그래서 사용자는 그것을 확인할 수 있습니다 이 플러그인은 같은 공공 서비스에서 포인트.

공식 목록

• Claude (Anthropic의 공식 Claude 디렉토리): claude.ai/customize/skills/.../npmscan -ChatGPT (클릭 설정에 대한 앱으로 npmscan 설치): chatgpt.com/플러그인/.../npmscan
• ** mcpHQ **: mcphq.org
• **TensorBlock MCP 인덱스 **: tensorblock.co/mcp
• **Awesome Gemini CLI **: Piebald-AI/awesome-gemini-cli
• **Awesome Gemini CLI 확장 **: Piebald-AI/awesome-gemini-cli-extensions -Awesome Codex 플러그인: hashgraph-online/awesome-codex-plugins
• 다른 클라이언트를 위한 설정 문서: npmscan.com/mcp

종료:

• Grok Build (xAI의 공식 플러그인 마켓 플레이스): 제출 xai-org/플러그인 마켓 플레이스#1506, xAI 검토를 기다리고 있습니다. Grok Build를 사용하여보십시오.
• **GitHub Copilot ** (Awesome Copilot 시장) : 제출 github/awesome-copilot#5142.
• **Gemini CLI ** (extension gallery) :이 저장소에서 자동으로 색인. 이름 *

NPMScan plugin for Claude Code

A Claude Code plugin that gives Claude read-only npm package and vulnerability lookups, backed by npmscan.com’s free, unauthenticated MCP server.

NPMScan is also officially listed for both ChatGPT and Claude on npmscan.com’s MCP page, so users can verify that this plugin points at the same public service.

Official listings

• Claude (Anthropic’s official Claude directory): claude.ai/customize/skills/…/npmscan
• ChatGPT (install npmscan as an app for one-click setup): chatgpt.com/plugins/…/npmscan
• mcpHQ: mcphq.org
• TensorBlock MCP Index: tensorblock.co/mcp
• Awesome Gemini CLI: Piebald-AI/awesome-gemini-cli
• Awesome Gemini CLI Extensions: Piebald-AI/awesome-gemini-cli-extensions
• Awesome Codex Plugins: hashgraph-online/awesome-codex-plugins
• Setup docs for other clients: npmscan.com/mcp

Pending:

• Grok Build (xAI’s official plugin marketplace): submitted in xai-org/plugin-marketplace#1506, awaiting xAI review. See Using it with Grok Build.
• GitHub Copilot (Awesome Copilot marketplace): submitted in github/awesome-copilot#5142.
• Gemini CLI (extension gallery): indexed automatically from this repo. See Using it with Gemini CLI.

What it adds

• MCP server (npmscan, https://npmscan.com/api/mcp) with twenty-three tools — see Tools below. Every tool result includes an npmscanUrl linking back to the full write-up on npmscan.com. No API key or auth required — same public data as the website. The server is stateless and rate-limited to 30 requests/minute per IP. Every vulnerability finding carries isMalware, so a confirmed-malicious package is reported as malware to remove, never as an ordinary bug.

• /npmscan:dependency-audit skill — chains batch_query_vulnerabilities → get_package/get_package_version → analyze_transitive_dependencies → the maintainer/provenance/license/remediation/alternative tools into one dependency-audit report, instead of leaving that tool sequencing to Claude each time. Also handles PR-style before/after diffs via diff_dependencies, raw npm audit --json output via enrich_npm_audit,