Keyword: slopsquatting

• drillable-check

  Released

  4d ago

  Version

  0.1.3

  Catch hallucinated, squatted, unpublished, or vulnerable dependencies — grades the packages in your lockfiles against the live registry + OSV.

  dependenciessupply-chainslopsquattingtyposquattingauditci+2
• @graneth/mcp-server

  Released

  yesterday

  Version

  0.2.2

  Account-free MCP server: catch AI-hallucinated packages and hardcoded secrets before you commit. Exposes the free pre_flight_check tool over stdio.

  mcpsecurityslopsquattingaiclaudecursor+1
• import-guardian-mcp

  Released

  5d ago

  Version

  0.2.3

  Catch AI-hallucinated (slopsquatted) npm imports in generated code BEFORE npm install. Scans a code block, flags imports of packages that don't exist on npm (the name an LLM invented and attackers register with malware) plus fresh lookalike squats. MCP se

  mcpmodel-context-protocolnpmsecuritysupply-chainslopsquatting+4
• airlock-cli

  Released

  6d ago

  Version

  0.1.0

  A firewall between AI coding agents and dangerous actions. Blocks hallucinated packages, leaked secrets, destructive commands, and test-subversion.

  aiagentagentssecurityslopsquattingsupply-chain+12