Slopsquat Scanner MCP Server

by guardbee Your server? Claim it

local only

Slopsquat Scanner runs on your own machine — the client starts it, so there is no endpoint to ping. 279 installs a week from npm. Last commit 1 Nov 2026.

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

Installs per day peak 576 · avg 33 · -54% w/w

a month agotoday

279

Installs / week

npm · @guardbee/mcp-slopsquat-scanner

Stars

11 open issues

1 Nov 2026

Last commit

8 releases in 90 days

MIT

License

TypeScript

Nothing serious here today

Today is the operative word: we check Slopsquat Scanner every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add slopsquat-scanner -- npx -y @guardbee/mcp-slopsquat-scanner

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "slopsquat-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "@guardbee/mcp-slopsquat-scanner"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.slopsquat-scanner]
command = "npx"
args = ["-y", "@guardbee/mcp-slopsquat-scanner"]

.cursor/mcp.json

{
  "mcpServers": {
    "slopsquat-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "@guardbee/mcp-slopsquat-scanner"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "slopsquat-scanner": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@guardbee/mcp-slopsquat-scanner"
      ]
    }
  }
}

Alternatives to Slopsquat Scanner

same job, measured the same way

Slopsquat Scanner

by 4hmetuyar

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

local only

Exploitwatch

by vercel-exploitwatch-kappa

Check dependencies against CISA's real Known Exploited Vulnerabilities feed.

1 tools answering

cve-cache

by weiseer

Recent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).

75 installs/wk local only

Pkgtruth

by hxckya

Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.

71 installs/wk local only

Presend dependency checks

by presendapp

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

5 tools answering

Typosquat

by cloudcorprecords

Check dependency names against popular package names at small edit distance.

local only

OSV Dependency Vulnerability Check

by fairquery

Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

answering

License Sentinel

by wgd5678

Audit Python and npm dependency licenses before you ship, judged against how you distribute.

37 installs/wk local only

Slopsquat Scanner — questions

Answers built from our own checks of this server.

Why is there no uptime for Slopsquat Scanner?

Slopsquat Scanner runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @guardbee/mcp-slopsquat-scanner was installed 279 times last week.

How do I connect Slopsquat Scanner?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @guardbee/mcp-slopsquat-scanner straight from npm; nothing to host, nothing to sign up for.

How many people use Slopsquat Scanner?

The npm package @guardbee/mcp-slopsquat-scanner was installed 279 times in the last week. Week over week that is -54%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Slopsquat Scanner open source?

Yes — it is published under the MIT licence, written in TypeScript, 2 stars on GitHub and 11 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.