Плагин Claude Code, который дает Claude read-only npm и поиск уязвимостей npmscan.com - бесплатный, неаутентифицированный MCP-сервер.

NPMScan также официально указан для ChatGPT и Claude on. MCP-страница npmscan.com, чтобы пользователи могли проверить Этот плагин указывает на ту же государственную службу.

Официальные списки

Claude (официальный каталог Claude от Anthropic): claude.ai/customize/skills/.../npmscan ChatGPT (установить npmscan в качестве приложения для настройки одним щелчком мыши): chatgpt.com/plugins/.../npmscan mcpHQ: mcphq.org TensorBlock MCP Index: tensorblock.co/mcp ** Удивительные Близнецы CLI**: Piebald-AI/awesome-gemini-cli Удивительные расширения CLI Близнецов: расширения Piebald-AI/awesome-gemini-cli Awesome Codex Plugins: хэшграф-онлайн/awesome-codex-plugins Документы для других клиентов: npmscan.com/mcp

В ожидании:

• Grok Build (официальный рынок плагинов xAI): представлено в xai-org/plugin-marketplace#1506, Ждем обзора xAI. Используется с Grok Build. GitHub Copilot (Awesome Copilot market): представлено на сайте github/awesome-copilot#5142. Gemini CLI (галерея расширений): индексируется автоматически из этого репо. Видишь

NPMScan plugin for Claude Code

A Claude Code plugin that gives Claude read-only npm package and vulnerability lookups, backed by npmscan.com’s free, unauthenticated MCP server.

NPMScan is also officially listed for both ChatGPT and Claude on npmscan.com’s MCP page, so users can verify that this plugin points at the same public service.

Official listings

• Claude (Anthropic’s official Claude directory): claude.ai/customize/skills/…/npmscan
• ChatGPT (install npmscan as an app for one-click setup): chatgpt.com/plugins/…/npmscan
• mcpHQ: mcphq.org
• TensorBlock MCP Index: tensorblock.co/mcp
• Awesome Gemini CLI: Piebald-AI/awesome-gemini-cli
• Awesome Gemini CLI Extensions: Piebald-AI/awesome-gemini-cli-extensions
• Awesome Codex Plugins: hashgraph-online/awesome-codex-plugins
• Setup docs for other clients: npmscan.com/mcp

Pending:

• Grok Build (xAI’s official plugin marketplace): submitted in xai-org/plugin-marketplace#1506, awaiting xAI review. See Using it with Grok Build.
• GitHub Copilot (Awesome Copilot marketplace): submitted in github/awesome-copilot#5142.
• Gemini CLI (extension gallery): indexed automatically from this repo. See Using it with Gemini CLI.

What it adds

• MCP server (npmscan, https://npmscan.com/api/mcp) with twenty-three tools — see Tools below. Every tool result includes an npmscanUrl linking back to the full write-up on npmscan.com. No API key or auth required — same public data as the website. The server is stateless and rate-limited to 30 requests/minute per IP. Every vulnerability finding carries isMalware, so a confirmed-malicious package is reported as malware to remove, never as an ordinary bug.

• /npmscan:dependency-audit skill — chains batch_query_vulnerabilities → get_package/get_package_version → analyze_transitive_dependencies → the maintainer/provenance/license/remediation/alternative tools into one dependency-audit report, instead of leaving that tool sequencing to Claude each time. Also handles PR-style before/after diffs via diff_dependencies, raw npm audit --json output via enrich_npm_audit,