Slopsquat Scanner runs on your own machine — the client starts it, so there is no endpoint to ping. 41 installs a week from npm. Last commit 11 Oct 2026.
Checks declared npm/PyPI dependencies against real registries to catch slopsquatting
Nothing serious here today
Today is the operative word: we check Slopsquat Scanner every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add slopsquat-scanner -- npx -y @guardbee/mcp-slopsquat-scanner{
"mcpServers": {
"slopsquat-scanner": {
"args": [
"-y",
"@guardbee/mcp-slopsquat-scanner"
],
"command": "npx"
}
}
}[mcp_servers.slopsquat-scanner]
command = "npx"
args = ["-y", "@guardbee/mcp-slopsquat-scanner"]{
"mcpServers": {
"slopsquat-scanner": {
"args": [
"-y",
"@guardbee/mcp-slopsquat-scanner"
],
"command": "npx"
}
}
}{
"mcpServers": {
"slopsquat-scanner": {
"args": [
"-y",
"@guardbee/mcp-slopsquat-scanner"
],
"command": "npx"
}
}
}Alternatives to Slopsquat Scanner
same job, measured the same wayCheck dependencies against CISA's real Known Exploited Vulnerabilities feed.
Recent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).
Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.
Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.
Audit Python and npm dependency licenses before you ship, judged against how you distribute.
CVE scanning for npm/pip/cargo dependencies via OSV
Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.
Check npm dependencies for outdated majors, and see which dev tools AI models pick.
Slopsquat Scanner — questions
Answers built from our own checks of this server.