{"data":{"slug":"lazaretto","name":"Lazaretto: pre-install malware scan for npm, PyPI, GitHub and MCP servers","description":"Lazaretto is a pre-install security scan of npm and PyPI packages, GitHub repositories, agent skills and MCP servers for malware and prompt injection. It runs before an AI agent installs, clones or connects, and also takes raw URLs, ClawHub skills, MCP tool lists and inline content. The paid API, POST /v1/scan, matches a target's version against OSV and OpenSSF malicious-package advisories, then runs behavioral analysis to detect credential theft, exfiltration, obfuscation, prompt injection, install-time droppers and MCP tool poisoning, with file-and-line evidence. For an MCP server it connects, lists the tools and reads their descriptions to check whether it is poisoned before connecting. It returns a verdict (clear, flagged, malicious, error), a SHA-256 of what was analyzed and an Ed25519-signed attestation that verifies offline against a public JWKS, so one agent can hand it to another. Deterministic: no LLM in the scan path, so the same input gives the same verdict; rules are versioned. Free, no account: a lockfile check of every exactly pinned dependency against the same advisories, a known-bad hash lookup, an attestation lookup and a browser check of a remote MCP server at /check/mcp. Verify dependencies for supply chain attacks before installing, scan a Python package, check a GitHub repository before cloning, or add supply chain security for AI agents in CI with the GitHub Action, Claude Code plugin or MCP server at /mcp. It is not a vulnerability or CVE scanner. A clear result means nothing matched; this is not a statement that an artifact carries no risk or is trustworthy. A scan that errors is never charged.","base_url":"https://lazaretto.dev","website_url":"https://lazaretto.dev","category":"Verification","endpoint_count":2,"min_price_usd":0.03,"uptime_24h":100,"source":"submitted","status":"online","verified":false,"verified_until":null,"payment_ready":true,"payment_ready_until":"2026-11-17T22:50:23.347Z","last_success_at":"2026-11-10T22:50:23.347Z","consecutive_failures":0,"check_interval_minutes":15,"last_checked_at":"2026-11-10T22:50:23.347Z","created_at":"2026-08-12T15:45:23.586Z","uptime":{"24h":100,"7d":100,"30d":99.9,"90d":99.9,"coverage":{"24h":{"daysCovered":1,"checkCount":81},"7d":{"daysCovered":7,"checkCount":616},"30d":{"daysCovered":30,"checkCount":2640},"90d":{"daysCovered":90,"checkCount":8030}}},"avg_response_time_ms":484,"total_checks":4074,"networks":["BSE"],"networks_caip2":["eip155:8453"],"asset":"USDC","endpoints":[{"id":"b6287511-045e-4660-925f-b5476accf243","method":"POST","path":"/v1/credits/topup","description":"Prepaid bundle of Lazaretto scan credits. Returns an API key for POST /v1/scan. The request body selects the bundle: {\"bundle\":\"starter\"|\"pro\"|\"scale\"}.","mime_type":"application/json","is_active":true,"first_seen_at":"2026-08-12T15:45:23.586Z","last_seen_at":"2026-11-10T22:50:23.331Z","variable_amount":false,"min_price_usd":3,"networks":["BSE"],"pricing":[{"scheme":"exact","network":"eip155:8453","network_caip2":"eip155:8453","asset_address":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","asset_address_norm":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USDC","price":"3000000","price_usd":"3.0000000000","pay_to":"0x428df107e32E08288fcAC6567f4F40bc4eAB4Da0","max_timeout_seconds":60}],"pay_to_divergence":null},{"id":"36239e2c-9723-47a8-9727-a7e9f613e1c2","method":"POST","path":"/v1/scan","description":"Supply chain security scan of an npm or PyPI package, GitHub repo, raw URL, ClawHub skill or MCP server. Use it when an agent is about to install, clone or connect to something. Matches the target against OSV and OpenSSF advisories to catch known malware, then behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection, install-time droppers and tool poisoning. Returns a verdict, file-and-line evidence, a SHA-256 and a signed attestation. An errored scan is free.","mime_type":"application/json","is_active":true,"first_seen_at":"2026-08-12T15:45:23.586Z","last_seen_at":"2026-11-10T22:50:23.338Z","variable_amount":false,"min_price_usd":0.03,"networks":["BSE"],"pricing":[{"scheme":"exact","network":"eip155:8453","network_caip2":"eip155:8453","asset_address":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","asset_address_norm":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USDC","price":"30000","price_usd":"0.0300000000","pay_to":"0x428df107e32E08288fcAC6567f4F40bc4eAB4Da0","max_timeout_seconds":60}],"pay_to_divergence":null}],"pay_to_changes":[],"assessment":{"updated_at":"2026-11-10T18:44:07.383Z","input_hash":"02874fa7e4d0d742f4044e5103bf333cdc4d9fc39964cfe68d5e57526c9e6c5f","model_id":null,"prompt_version":null,"reliability":{"uptime":{"24h":100,"7d":100,"30d":99.9,"90d":99.9},"response_p95_ms":931,"avg_response_ms":484,"last_checked_at":"2026-11-10T18:33:28.014Z","consecutive_failures":0,"total_checks":4058},"compliance":{"grade":"A","passed":14,"total":14,"checks":[{"id":"payload_captured","label":"402 payload captured","pass":true},{"id":"accepts_present","label":"accepts[] array present","pass":true},{"id":"payto_recoverable","label":"payTo address recoverable","pass":true},{"id":"payto_conformant","label":"payTo at accepts[0].payTo (conformant shape)","pass":true},{"id":"payto_shape","label":"payTo is a valid on-chain address","pass":true},{"id":"price_present","label":"atomic price declared","pass":true},{"id":"price_sane","label":"atomic price in a sane range","pass":true},{"id":"asset_declared","label":"asset (token) address declared","pass":true},{"id":"network_caip2","label":"network resolves to CAIP-2","pass":true},{"id":"scheme_declared","label":"payment scheme declared","pass":true},{"id":"transport_https","label":"served over HTTPS","pass":true},{"id":"x402_version_current","label":"declares the current x402 version (2)","pass":true},{"id":"eip712_domain_extra","label":"EIP-712 domain parameters present on every EVM entry","pass":true},{"id":"version_channel_coherent","label":"x402 v2 envelope delivered in the payment-required header","pass":true}],"pay_to_source":"payTo","pay_to_location":"accept","staleness":{"probe_failing":false,"last_success_at":"2026-11-10T22:50:23.347Z","envelope_captured_at":"2026-08-12T15:46:01.113Z"}},"site":{"homepage":true,"openapi":true,"pricing":true,"llms_txt":true,"robots":true,"terms":true,"checked_at":"2026-11-09T05:44:12.941Z"},"domain":{"age_days":119,"registrar":"CloudFlare, Inc.","free_host":false,"created_date":"2026-07-10T14:53:18.910Z","checked_at":"2026-11-06T22:14:39.348Z"},"economics":{"price_usd":0.03,"price_atomic":"30000","model":"tiered","category_percentile":77,"stability":1,"price_max_usd":3,"category_percentile_max":91,"endpoint_count":2,"distinct_price_count":2},"risk":{"level":"clean","flags":[]},"synthesis":null,"traction":{"status":"measured","volume_usd_30d":0.06,"tx_count_30d":2,"unique_buyers_30d":2,"last_settlement_at":"2026-10-26T19:01:59Z","top_buyer_share_30d":0.5,"top_3_buyers_share_30d":1,"concentrated_volume":false,"trend_7d_vs_30d":2.142857142857143,"shared_payout":false,"shared_with":0,"measured_networks":["eip155:8453"],"first_settlement_at":"2026-07-13T23:54:17Z","volume_usd_all_time":0.36,"tx_count_all_time":12,"median_settlement_usd_30d":0.03,"max_settlement_usd_30d":0.03,"settled_via":["coinbase"],"settled_via_detail":[{"id":"coinbase","volume_usd_30d":0.06,"tx_count_30d":2}],"shared_with_services":[],"pro_quota_share":1,"caveat":"Conservative undercount: only USDC settlements via facilitators we measure are counted. A measured floor, not an estimate.","all_time_caveat":"All-time is floored at the start of our harvest window, not the service full history."}}},"provenance":{"license":"CC-BY-4.0","attribution_required":true,"attribution":"Data: x402-list.com (CC BY 4.0)","cite_as":"https://x402-list.com/services/lazaretto","source":"https://x402-list.com"}}