
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@apexacc/audit
Advanced tools
Web3 Security Scanner — 18 tools for DYOR and smart contract auditing.
Built by Apex Foundation.
Apex Audit is an MCP server exposing 18 security tools directly inside your AI assistant. Scan tokens, wallets, and smart contracts without leaving your workflow.
npx @apexacc/audit
Get your token at audit.apexaccs.org/dashboard. Paste it on first launch. Done.
| Tool | What it does |
|---|---|
audit_token_risk | Aggregated SAFE / WARN / DANGER verdict, score 0–100 |
audit_honeypot | Simulates buy + sell before you buy. Detects blocked withdrawals |
audit_wallet_risk | Dangerous approvals, drainers, scam contract interactions |
audit_social_auth | Bot ratio, engagement quality, impersonation flags |
audit_rug_pull | Liquidity lock, insider concentration, dump patterns |
audit_whale_tracker | Top holder movements, dump signals |
audit_creator_history | Deployer past scams across all chains |
audit_lp_scan | LP lock status, unlocks next 90 days, buy / sell taxes |
audit_deepfake | Fake celebrity / fund accounts, AI-generated content flags |
| Tool | What it does |
|---|---|
audit_full_contract | Slither + static analysis, 15+ vulnerability classes |
audit_access_control | Who holds mint, pause, upgrade rights. Multi-sig check |
audit_onchain_forensics | Transaction tracing, wallet clustering, linked addresses |
audit_jurisdiction | 28 jurisdictions ranked for your project profile |
audit_report_generator | Structured audit report ready for investors |
audit_contract_compare | Fork detection against 2.4M verified contracts |
audit_fund_match | 400+ Web3 funds matched to your project |
audit_token_security_api | GoPlus + Slither + CertiK aggregated in one call |
audit_diff_checker | What changed since the last audit. New vulnerabilities flagged |
Use Apex Audit tools from any MCP-compatible client — Claude.ai, Claude Code, Cursor, Windsurf, Cline:
{
"mcpServers": {
"apex-audit": {
"command": "node",
"args": ["/path/to/apex-audit-mcp/dist/server.js"]
}
}
}
Or run npx @apexacc/audit to auto-configure Claude Desktop.
Add a badge to your project after passing an Apex Audit:
Safe:

Danger:

Token addresses, wallet addresses, and contract source are sent to Apex Audit servers for analysis. No private keys are ever required or transmitted.
FAQs
Unknown package
The npm package @apexacc/audit receives a total of 0 weekly downloads. As such, @apexacc/audit popularity was classified as not popular.
We found that @apexacc/audit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.