{"slug":"lazaretto-46a861cd","name":"Lazaretto","summary":"Deterministic pre-install verification for npm packages, AI agent skills and MCP tools. Matches the exact version against OSV and OpenSSF malicious-package advisories, then runs behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection and install-time droppers, returning a verdict with file-and-line evidence, a SHA-256 of what was analyzed, and a signed attestation that verifies offline. No LLM in the scan path, so the same input yields the same verdict.","status":"live","indexable":true,"listed_since":"2026-10-25T17:50:56.889437Z","sources":[{"source":"x402_bazaar","external_id":"https://lazaretto.dev/v1/scan","owner_address":"0x428df107e32e08288fcac6567f4f40bc4eab4da0","seen_at":"2026-10-26T05:59:23.348256Z","removed_at":null}],"endpoints":[{"url":"https://lazaretto.dev/v1/scan","host":"lazaretto.dev","protocol":"x402","state":"live","last_probe_at":"2026-10-26T03:16:26.390721Z","last_ok_at":"2026-10-26T03:16:26.390721Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[{"slug":"lazaretto-dev-f759807e","name":"lazaretto.dev"}],"payment_options":[],"usage":{"source":"x402_bazaar","unique_payers_30d":1,"paid_calls_30d":1,"last_paid_at":"2026-10-18T02:19:02.636Z","reported_at":"2026-10-26T05:59:23.348256Z"},"notice":"Not affiliated with addrbook — claim or request removal."}