public evidence dossier
io.github.salemalem/npmscan
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Latest visible observation: 2026-08-30T22:30:41.080Z
Identity
namespacegithub · observed 2026-08-01T16:41:13.330681Z
registry statusactive · observed 2026-08-01T16:41:13.330681Z
origin systemsgithub, registry · observed 2026-08-30T22:30:41.080Z
Distribution
repositoryhttps://github.com/salemalem/npmscan · observed 2026-08-03 14:37:26
npm packageUnknown · observed 2026-08-03 14:37:26
PyPI packageUnknown
hosted endpointhttps://npmscan.com/api/mcp
Maintenance and public findings
repository pushedUnknown
repository archivedUnknown · observed 2026-08-03 14:37:26
npm deprecatedUnknown · observed 2026-08-03 14:37:26
OSV package advisoryUnknown · observed 2026-08-03 14:37:26
Hosted liveness
last endpoint observationUnknown
reported MCP revision2025-06-18 · observed 2026-08-28 09:03:31
Limits
This dossier reports public evidence. It is not a safety, code, permission, scope, runtime, or penetration-test verdict. Missing evidence remains unknown.