PkgRadar

npm · registry.npmjs.org

@aliyunrds/ctxdb

Install Lifecycle Suppresses Failure: postinstall="chmod +x dist/hooks/*.js dist/cli/main.js 2>/dev/null || true"

Why PkgRadar flagged 0.0.5

SeveritySignalEvidence
highInstall Lifecycle Suppresses Failurepostinstall="chmod +x dist/hooks/*.js dist/cli/main.js 2>/dev/null || true" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.10Low risk02026-06-12
0.0.9Low risk02026-06-10
0.0.9-beta.1Low risk02026-06-10
0.0.5High risk252026-06-10
0.0.4High risk252026-06-10
0.0.3High risk252026-06-10
0.0.2High risk252026-06-10
0.0.1High risk252026-06-10
0.0.7High risk252026-06-10
0.0.8Low risk02026-06-09
0.0.8-beta.5Low risk02026-06-09
0.0.8-beta.4Low risk02026-06-09
0.0.8-beta.3Low risk02026-06-09
0.0.8-beta.2Low risk02026-06-09
0.0.8-beta.1Low risk02026-06-08

Block this in CI

PkgRadar gates @aliyunrds/ctxdb (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @aliyunrds/[email protected]
Start free — 25 scans / moView full evidence