verify_package
5 registry entries were observed exposing a tool named verify_package — none of them flagged as a privileged capability.
Every row is point-in-time scan output, dated below. Forge has an observed tool surface for 12,346 of 40,589 scannable entries (30%) — an entry that has not been scanned cannot appear here, so absence from this list is not evidence that an entry does not expose this tool.
- v0.1.11↓ 235/wk
Verify an npm package before install: advisories, install scripts, typosquats, declared repository.
ClaudeCursorCopilotGeminimcp - v0.3.0↓ 558/wk
Catch AI-hallucinated (slopsquatted) npm imports in generated code BEFORE npm install. Scans a code block, flags imports of packages that don't exist on npm (the name an LLM invented and attackers register with malware) plus fresh lookalike squats. MCP se
ClaudeCursorCopilotGeminimcpmodel-context-protocolnpmsecuritysupply-chainslopsquatting - v1.0.1
Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.
ClaudeCursorCopilotChatGPTGeminiio.github.julian-martin89Unknown1mo agoobserved · live tools/listmcp - v1.0.4
MCP server for Mikhail (ManSio)'s engineering portfolio: projects, principles, lab, evidence.
ClaudeCursorCopilotChatGPTGeminiio.github.ManSioUnknown1mo agoobserved · live tools/listmcp - v0.1.0
Clockchain®: neutral verified network time for AI agents (get_time). Testnet.
ClaudeCursorCopilotChatGPTGeminimcp