sandcheck

sandcheck/sandcheck

★ 0 stars TypeScript 🤖 AI/LLM Updated 6d ago

Check your npm packages against a curated list of known-compromised versions. CLI, MCP server, and JSON dataset, free, open, citation-driven.

View on GitHub →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "sandcheck": {
      "command": "npx",
      "args": [
        "-y",
        "sandcheck/sandcheck"
      ]
    }
  }
}

README Excerpt

> Check your npm packages against a curated list of known-compromised versions. Built for the AI-coding era. Sandcheck is a curated, citation-driven aggregator of compromised and malicious npm package data, paired with a small CLI and an MCP server so AI coding assistants can check packages *before* they ever land in your `package.json`.

sandcheck

Quick Install

README Excerpt

Related AI/LLM Servers