slopsquat scanner for Cursor
io.github.4hmetuyar/slopsquat-scanner
Checks declared npm/PyPI dependencies against real registries to catch slopsquatting
client:Cursor
transport:stdio
runtime:npm
Install slopsquat scanner in Cursor
~/.cursor/mcp.json · windows: %USERPROFILE%\.cursor\mcp.json
{
"mcpServers": {
"slopsquat-scanner": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-slopsquat-scanner"
]
}
}
}
Use .cursor/mcp.json in a project root instead to scope it to that project. Cursor merges both. Cursor docs