npm-supply-chain-audit-mcp
by Tyler FrancisUpdated Aug 12, 2026
Audits package.json for typosquatting risk against the most-depended-on npm packages, malicious install-script patterns (curl-pipe-shell, obfuscated base64 payloads), and unpinned dependency versions.
Audits package.json for typosquatting risk against the most-depended-on npm packages, malicious install-script patterns (curl-pipe-shell, obfuscated base64 payloads), and unpinned dependency versions.