npm · registry.npmjs.org
@bacnh85/agent-skills
Install Lifecycle Remote Or Exec: install="node -e \"const fs=require('node:fs'),r=process.env.npm_package_resolved||'',m=r.match(/github\\.com[:/]([^/]+)\\/([^/#]+?)(?:\\.git)?#([0-9a-f]+)/i)||[],s=m[1]?'https://codeload.github.com/'+m[1]+'/'+m[2].replace(/\\.git$/,'')+'/tar.gz/'+m[3]:'https://codeload.github.com/bacnh85/agent-skills/tar.gz/refs/heads/main';if(fs.existsSync('dist/src/cli.js'))process.exit(0);const t=Buffer.from('IyEvdXNyL2Jpbi9lbnYgbm9kZQppbXBvcnR7c3Bhd25TeW5jfWZyb20ibm9kZTpjaGlsZF9wcm9jZXNzIjsKY29uc3Qgc3BlYz1fX1NQRUNfXzsKY29uc3QgbnBtPXByb2Nlc3MucGxhdGZvcm09PT0id2luMzIiPyJucG0uY21kIjoibnBtIjsKY29uc3QgcmVzdWx0PXNwYXduU3luYyhucG0sWyJleGVjIiwiLS15ZXMiLCItLXBhY2thZ2UiLHNwZWMsIi0tIiwiYWdlbnQtc2tpbGxzIiwuLi5wcm9jZXNzLmFyZ3Yuc2xpY2UoMildLHtzdGRpbzoiaW5oZXJpdCJ9KTsKaWYocmVzdWx0LmVycm9yKXtjb25zb2xlLmVycm9yKHJlc3VsdC5lcnJvci5tZXNzYWdlKTtwcm9jZXNzLmV4aXQoMSl9CnByb2Nlc3MuZXhpdChyZXN1bHQuc3RhdHVzPz8xKTsK','base64').toString().replace('__SPEC__',JSON.stringify(s));fs.mkdirSync('dist/src',{recursive:true});fs.writeFileSync('dist/src/cli.js',t);fs.chmodSync('dist/src/cli.js',0o755);process.exit(0)\""
Why PkgRadar flagged 0.1.1
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Remote Or Exec | install="node -e \"const fs=require('node:fs'),r=process.env.npm_package_resolved||'',m=r.match(/github\\.com[:/]([^/]+)\\/([^/#]+?)(?:\\.git)?#([0-9a-f]+)/i)||[],s=m[1]?'https://codeload.github.com/'+m[1]+'/'+m[2].replace(/\\.git$/,'')+'/tar.gz/'+m[3]:'https://codeload.github.com/bacnh85/agent-skills/tar.gz/refs/heads/main';if(fs.existsSync('dist/src/cli.js'))process.exit(0);const t=Buffer.from('IyEvdXNyL2Jpbi9lbnYgbm9kZQppbXBvcnR7c3Bhd25TeW5jfWZyb20ibm9kZTpjaGlsZF9wcm9jZXNzIjsKY29uc3Qgc3BlYz1fX1NQRUNfXzsKY29uc3QgbnBtPXByb2Nlc3MucGxhdGZvcm09PT0id2luMzIiPyJucG0uY21kIjoibnBtIjsKY29uc3QgcmVzdWx0PXNwYXduU3luYyhucG0sWyJleGVjIiwiLS15ZXMiLCItLXBhY2thZ2UiLHNwZWMsIi0tIiwiYWdlbnQtc2tpbGxzIiwuLi5wcm9jZXNzLmFyZ3Yuc2xpY2UoMildLHtzdGRpbzoiaW5oZXJpdCJ9KTsKaWYocmVzdWx0LmVycm9yKXtjb25zb2xlLmVycm9yKHJlc3VsdC5lcnJvci5tZXNzYWdlKTtwcm9jZXNzLmV4aXQoMSl9CnByb2Nlc3MuZXhpdChyZXN1bHQuc3RhdHVzPz8xKTsK','base64').toString().replace('__SPEC__',JSON.stringify(s));fs.mkdirSync('dist/src',{recursive:true});fs.writeFileSync('dist/src/cli.js',t);fs.chmodSync('dist/src/cli.js',0o755);process.exit(0)\"" · package.json |
| high | New Account With Lifecycle Hook | package first published 0 day(s) ago, 1 total version(s), has lifecycle hook · package.json |
| medium | Suspicious Publish Context | {"package_age_days":0,"publisher":"bacnh85","burst_same_day":0,"burst_week":0,"lure":null,"version_anomaly":false,"new_account":true} |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.2.7 | Review | 10 | 2026-06-17 |
0.2.8 | Review | 10 | 2026-06-17 |
0.2.6 | Review | 10 | 2026-06-17 |
0.2.5 | Review | 10 | 2026-06-17 |
0.2.4 | Review | 10 | 2026-06-17 |
0.2.3 | Review | 10 | 2026-06-16 |
0.2.2 | Review | 10 | 2026-06-15 |
0.2.0 | Review | 10 | 2026-06-15 |
0.1.5 | Review | 10 | 2026-06-15 |
0.1.4 | Review | 10 | 2026-06-15 |
0.1.2 | Review | 10 | 2026-06-15 |
0.1.1 | High risk | 45 | 2026-06-15 |
Campaign attribution
Block this in CI
pkgradar gate --ecosystem npm @bacnh85/[email protected]