
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
scan-mcp: MCP server for scanner capture (ADF/duplex/page-size), batching, and multipage assembly
Minimal MCP server for scanner capture (ADF/duplex/page-size), batching, and multipage assembly.
Note: This package targets Node 22 and Linux SANE backends (scanimage).
Add a server entry to your MCP client configuration:
{
"mcpServers": {
"scan": {
"command": "npx",
"args": [
"-y",
"scan-mcp"
],
"env": {
"INBOX_DIR": "~/Documents/scanned_documents/inbox"
}
}
}
}
start_scan_job without a device_id to auto-select a scanner and begin scanning.INBOX_DIR per job: job-*/page_*.tiff, doc_*.tiff, manifest.json, events.jsonl.Prefer to attach the scanner to another machine on your network? scan-mcp also supports the
streamable HTTP transport:
scan-mcp --http
3001; set MCP_HTTP_PORT to override (for example MCP_HTTP_PORT=3333 scan-mcp --http).npx scan-mcp (recommended)
npx scan-mcp --http to launch the streamable HTTP transport when running on another machine.scan-mcp --helpnpm installnpm run buildscanimage (and optionally scanadf)tiffcp (preferred) or ImageMagick convertSCAN_MOCK (default: false): mock SANE calls and generate fake TIFFs for testing.INBOX_DIR (default: scanned_documents/inbox): base directory for job runs and artifacts.SCANIMAGE_BIN / SCANADF_BIN (defaults: scanimage / scanadf): override binary paths.TIFFCP_BIN / IM_CONVERT_BIN (defaults: tiffcp / convert): multipage assembly tools.SCAN_EXCLUDE_BACKENDS (CSV): backends to exclude (e.g., v4l).SCAN_PREFER_BACKENDS (CSV): preferred backends (e.g., epjitsu,epson2).PERSIST_LAST_USED_DEVICE (default: true): persist and lightly prefer last used device.MCP_HTTP_PORT (default: 3001): TCP port for the HTTP transport.list_devices
get_device_options
device_id (string): Target device identifier.start_scan_job
device_id triggers auto-selection and default options.device_id (string)resolution_dpi (integer, 50–1200)color_mode (Color | Gray | Lineart)source (Flatbed | ADF | ADF Duplex)duplex (boolean)page_size (Letter | A4 | Legal | Custom)custom_size_mm { width, height }doc_break_policy { type, blank_threshold, page_count, timer_ms, barcode_values }output_format (string, default tiff)tmp_dir (string)get_job_status
job_id (string)cancel_job
job_id (string)list_jobs
limit (integer, max 100)state (running | completed | cancelled | error | unknown)get_manifest
manifest.json.job_id (string)get_events
events.jsonl log.job_id (string)See JSON Schemas in schemas/ for input shapes. Tests assert against these contracts.
Defaults aim for 300dpi, reasonable color mode, and ADF/duplex when available. Full details on scoring and fallbacks live in docs:
docs/SELECTION.mdsrc/mcp.ts — MCP server entry and tool registrationsrc/services/* — hardware interface and job orchestrationschemas/ — JSON Schemas used for validation and testsdocs/ — architecture, conventions, and deep divesnpm run dev (stdio MCP server), npm run dev:http (HTTP transport)make verify runs lint, typecheck, and testsdocs/CONVENTIONS.md and architecture in docs/BLUEPRINT.mdTracking ideas and future improvements are documented in docs/ROADMAP.md.
FAQs
scan-mcp: MCP server for scanner capture (ADF/duplex/page-size), batching, and multipage assembly
We found that scan-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.