CVE Checker MCP Server Scans npm Packages for Known Vulnerabilities via OSV Before Install
modelcontextprotocol · reddit · 2026-11-11
A new MCP server, "CVE Checker for Node Modules," lets AI coding assistants check npm packages for known security vulnerabilities via the OSV API before installation. It supports both single-package checks and bulk vulnerability scanning, is written in TypeScript under an ISC license, and fits naturally into agent workflows that auto-install dependencies as a supply-chain safety gate.
More from coding & agent
- Claude Opus 5.5 runs an architecture search and finds AttnRes-Canon, a new top Transformer design — SonglinYang4 · 2026-11-11
- 5 research habits worth knowing: read papers backwards, reproduce first, wire coding agents via MCP — cneuralnetwork · 2026-11-11
- 'Adam can now do CAE': AI agent showcase in engineering simulation draws buzz — burhop · 2026-11-11
- Let your agent scan DB analytics to find missing indexes — DanielLockyer · 2026-11-11
- Prototype-to-codebase feasibility analysis via Claude and a read-only MCP knowledge base — OK_darein · 2026-11-11
- n8n Labs launches open-source agent Nod: zero false memories in 216 injection attacks — Aiden_Tech_Ai · 2026-11-11