MCP for npm compromised packages

On the light of the latest news, and the recent trends, I would like to know if there is an MCP server or any other tool to allow Claude Code to automatically search for infected packages before downloading them.