#supply-chain-security

3 results found

Security scanner for MCP servers — vet an MCP before you wire it into an agent. Detects prompt-injection, credential exfiltration (via taint analysis), RCE, and supply-chain risks, and catches cross-server exfil chains no single server reveals. Zero-dependency local CLI, SARIF output, CI-gateable, no account.

6 days ago

Elsas Security Intelligence

@elsas.it

Daily, Ed25519-signed security intelligence for AI-agent stacks: CVEs, supply-chain incidents and advisories (GHSA/CISA-KEV/OSV/NVD + national-CERT) assessed for MCP/LLM-proxy impact, cross-validated and signed. Paid via x402 ($0.10 USDC on Base); free sample, list_available, check_affected, get_since.

a month ago

Npmguard

@AyoubTadlaoui

Pre-install risk gate for npm packages. Stops AI coding agents from running malicious or typosquatted packages before lifecycle scripts run.

2 months ago