PkgRadar

npm · registry.npmjs.org

@alexsch01/tsnode

Install-time lifecycle script: preinstall="node scripts/preinstall.js"

Why PkgRadar flagged 0.1.38

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspreinstall added in 0.1.38 vs 0.1.37: "node scripts/preinstall.js" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.36Low risk02026-06-10
0.1.37Low risk02026-06-10
0.1.39Low risk02026-06-10
0.1.38High risk452026-06-10

Block this in CI

PkgRadar gates @alexsch01/tsnode (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @alexsch01/[email protected]