PkgRadar

npm · registry.npmjs.org

@elizaos/plugin-hedera

Install Lifecycle Remote Or Exec: postinstall="node -e \"const fs=require('fs');const path=require('path');const zodPath=path.join('node_modules','zod');if(fs.existsSync(zodPath)){fs.writeFileSync(path.join(zodPath,'v3.js'),'module.exports=require(\\\"./lib/index.js\\\");');fs.writeFileSync(path.join(zodPath,'v3.d.ts'),'export * from \\\"./lib/index\\\";');}\" || true"

Why PkgRadar flagged 3.0.1

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspostinstall added in 3.0.1 vs 1.0.1: "node -e \"const fs=require('fs');const path=require('path');const zodPath=path.join('node_modules','zod');if(fs.existsSync(zodPath)){fs.writeFileSync(path.join(zodPath,'v3.js'),'module.exports=require(\\\"./lib/index.js\\\");');fs.writeFileSync(path.join(zodPath,'v3.d.ts'),'export * from \\\"./lib/index\\\";');}\" || true" · package.json
highInstall Lifecycle Remote Or Execpostinstall="node -e \"const fs=require('fs');const path=require('path');const zodPath=path.join('node_modules','zod');if(fs.existsSync(zodPath)){fs.writeFileSync(path.join(zodPath,'v3.js'),'module.exports=require(\\\"./lib/index.js\\\");');fs.writeFileSync(path.join(zodPath,'v3.d.ts'),'export * from \\\"./lib/index\\\";');}\" || true" · package.json
highInstall Lifecycle Suppresses Failurepostinstall="node -e \"const fs=require('fs');const path=require('path');const zodPath=path.join('node_modules','zod');if(fs.existsSync(zodPath)){fs.writeFileSync(path.join(zodPath,'v3.js'),'module.exports=require(\\\"./lib/index.js\\\");');fs.writeFileSync(path.join(zodPath,'v3.d.ts'),'export * from \\\"./lib/index\\\";');}\" || true" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
3.0.1High risk952026-06-16
3.0.2High risk552026-06-16
3.0.3High risk552026-06-16
4.0.0High risk552026-06-16

Campaign attribution

Part of the asteroiddao npm campaign campaign.

Related campaigns

Block this in CI

PkgRadar gates @elizaos/plugin-hedera (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @elizaos/[email protected]