https://lazaretto.dev/ https://lazaretto.dev/blog https://lazaretto.dev/packages https://lazaretto.dev/terms https://lazaretto.dev/privacy https://lazaretto.dev/disclaimer https://lazaretto.dev/security https://lazaretto.dev/v1/rules https://lazaretto.dev/openapi.json https://lazaretto.dev/blog/scan-dependencies-for-malware-github-actions https://lazaretto.dev/blog/how-to-tell-if-an-npm-package-is-malicious https://lazaretto.dev/blog/why-a-scan-verdict-needs-a-hash https://lazaretto.dev/blog/what-a-malicious-agent-skill-steals https://lazaretto.dev/blog/check-an-mcp-server-for-malware-before-adding-it https://lazaretto.dev/blog/pay-per-call-verification-x402-for-agents https://lazaretto.dev/blog/verify-a-skill-before-your-agent-installs-it