PkgRadar

npm · registry.npmjs.org

@axiomatic-labs/claudeflow

Js Hidden Powershell: Hidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers.

Why PkgRadar flagged 2.32.22

SeveritySignalEvidence
highJs Hidden PowershellHidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers. · package/lib/install.js
mediumRemote Payloadmatched "curl " · package/lib/install.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.35.24Low risk02026-06-11
2.35.23Low risk02026-06-11
2.35.22Low risk02026-06-11
2.35.21Low risk02026-06-11
2.35.20Low risk02026-06-11
2.35.19Low risk02026-06-11
2.35.18Low risk02026-06-10
2.35.17Low risk02026-06-10
2.35.16Low risk02026-06-10
2.35.15Low risk02026-06-10
2.35.14Low risk02026-06-10
2.35.13Low risk02026-06-10
2.35.12Low risk02026-06-10
2.35.10Low risk02026-06-10
2.35.11Low risk02026-06-10
2.35.9Low risk02026-06-10
2.35.8Low risk02026-06-10
2.35.7Low risk02026-06-10
2.35.6Low risk02026-06-10
2.35.5Low risk02026-06-10
2.35.4Low risk02026-06-10
2.35.3Low risk02026-06-10
2.35.1Low risk02026-06-10
2.35.2Low risk02026-06-10
2.35.0Low risk02026-06-10
2.34.27Low risk02026-06-10
2.34.26Low risk02026-06-10
2.34.25Low risk02026-06-10
2.34.23Low risk02026-06-10
2.34.24Low risk02026-06-10
2.34.22Low risk02026-06-10
2.34.21Low risk02026-06-10
2.34.20Low risk02026-06-10
2.34.19Low risk02026-06-10
2.34.18Low risk02026-06-10
2.34.17Low risk02026-06-10
2.34.16Low risk02026-06-10
2.34.15Low risk02026-06-10
2.34.14Low risk02026-06-10
2.34.13Low risk02026-06-10
2.34.12Low risk02026-06-10
2.34.11Low risk02026-06-10
2.34.10Low risk02026-06-10
2.34.9Low risk02026-06-10
2.34.8Low risk02026-06-10
2.34.6Low risk02026-06-10
2.34.7Low risk02026-06-10
2.34.5Low risk02026-06-10
2.34.3Low risk02026-06-09
2.34.4Low risk02026-06-09
2.34.2Low risk02026-06-09
2.34.1Low risk02026-06-09
2.34.0Low risk02026-06-09
2.33.8Low risk02026-06-09
2.33.6Low risk02026-06-09
2.33.7Low risk02026-06-09
2.33.5Low risk02026-06-09
2.33.4Low risk02026-06-09
2.33.3Low risk02026-06-09
2.33.2Low risk02026-06-09
2.33.1Low risk02026-06-09
2.33.0Low risk02026-06-09
2.32.22Review392026-06-07
2.32.20Review392026-06-07
2.32.21Review392026-06-07
2.32.19Review392026-06-06
2.32.18Review392026-06-06
2.32.17Review392026-06-06
2.32.16Review392026-06-06
2.32.15Review392026-06-06
2.32.14Review392026-06-06
2.32.13Review392026-06-06
2.32.12Review392026-06-06
2.32.11Review392026-06-06
2.32.10Review392026-06-06
2.32.9Review392026-06-06
2.32.8Review392026-06-06
2.32.7Review392026-06-06
2.32.6Review392026-06-06
2.32.5Review392026-06-06
2.32.4Review392026-06-06
2.32.3Review392026-06-06
2.32.2Review392026-06-05
2.32.1Review572026-06-05
2.32.0Review392026-06-05
2.31.0Review392026-06-05
2.30.0Review392026-06-05
2.29.2Review572026-06-05
2.29.1Review392026-06-04
2.29.0Review572026-06-04
2.28.0Review392026-06-04
2.27.0Review572026-06-04
2.26.28Review392026-06-04
2.26.27Review392026-06-03
2.26.26Review392026-06-03
2.26.24Review392026-06-03
2.26.25Review392026-06-03
2.26.21Review282026-06-03
2.26.20Review282026-06-02
2.26.18Review572026-06-02
2.26.19Review572026-06-02
2.26.17Review572026-06-02
2.26.16Review282026-06-02
2.26.15Review282026-06-02
2.26.14Review282026-06-02
2.26.13Review572026-06-02
2.26.12Review572026-06-02
2.26.11Review282026-06-02
2.26.10Review572026-06-02
2.26.9Review282026-06-02
2.26.8Review282026-06-02
2.26.7Review282026-06-02
2.26.5Review282026-06-01
2.26.6Review282026-06-01
2.26.3Review572026-06-01
2.26.4Review282026-06-01
2.26.2Review282026-06-01
2.26.1Review282026-06-01
2.26.0Review282026-06-01
2.25.0Review282026-05-31
2.24.0Review282026-05-31
2.23.0Review282026-05-31
2.22.0Review282026-05-31
2.21.0Review282026-05-31
2.20.0Review282026-05-30
2.19.1Review572026-05-29
2.19.0Review572026-05-29
2.18.0Review282026-05-29
2.17.0Review282026-05-29
2.16.0Review312026-05-29
2.15.4Review312026-05-29
2.15.5Review312026-05-29
2.15.1Review312026-05-28
2.15.2Review312026-05-28
2.14.143Review622026-05-28
2.14.142Review312026-05-28
2.14.141Review622026-05-28
2.14.131Review82026-05-27
2.14.132Review82026-05-27
2.14.128Review82026-05-26
2.14.127Review172026-05-26
2.14.119Review82026-05-26
2.14.118Review172026-05-26
2.14.117Review82026-05-26
2.14.116Review82026-05-26
2.14.115Review82026-05-26
2.14.114Review82026-05-26
2.14.112Review82026-05-26
2.14.113Review82026-05-26
2.14.111Review82026-05-26
2.14.110Review82026-05-26
2.14.109Review82026-05-26
2.14.108Review172026-05-25
2.14.106Review82026-05-25
2.14.107Review82026-05-25
2.14.103Review82026-05-25
2.14.102Review82026-05-25
2.14.96Review82026-05-25
2.14.94Review82026-05-25
2.14.95Review82026-05-25
2.14.86Review422026-05-25
2.14.85Review422026-05-25
2.14.84Review422026-05-25
2.14.83Review422026-05-25
2.14.82Review422026-05-25
2.14.81Review422026-05-25
2.14.80Review422026-05-25
2.14.79Review422026-05-25
2.14.78Review422026-05-25
2.14.77Review422026-05-25
2.14.76Review422026-05-24
2.14.75Review422026-05-24
2.14.74Review422026-05-24
2.14.73Review422026-05-24
2.14.72Review422026-05-24
2.14.71Review422026-05-24
2.14.69Review422026-05-24
2.14.70Review422026-05-24

Block this in CI

PkgRadar gates @axiomatic-labs/claudeflow (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @axiomatic-labs/[email protected]
Start free — 25 scans / moView full evidence