ПРОФИЛЬ / БЕЗОПАСНОСТЬ
lazaretto-mcp
Проверка закреплённых версий зависимостей по сведениям о вредоносных пакетах и анализ файлов на утечки, обфускацию и опасные установочные действия.
СВЕДЕНИЯ ИЗ ИСХОДНОЙ БАЗЫ
О проекте
Check whether anything you depend on is known malware, before an agent installs it. check_lockfile takes a package-lock.json, yarn.lock or pnpm-lock.yaml and matches every pinned version against published malicious-package advisories in one call, free and with no API key, catching compromised releases like chalk@5.6.1 while leaving their clean releases alone. scan_artifact adds deterministic behavioral analysis (no LLM in the serving path) for credential theft, exfiltration, obfuscation, prompt injection and install-time droppers, with the file, line and evidence that triggered it; verdicts are SHA-256-bound so you can re-verify what landed on disk. Paid scans settle at $0.03 USDC on Base (x402) or prepaid credits
Исходное описание, снимок базы от 2026-10-03. Это не самостоятельная проверка редакции all-mcp.ru.