PkgRadar

npm · registry.npmjs.org

@exellix/graph-engine

Install-time lifecycle script: postinstall="node scripts/patch-ai-tasks-xynthesis-export.mjs"

Why PkgRadar flagged 7.2.0

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspostinstall added in 7.2.0 vs 7.0.2: "node scripts/patch-ai-tasks-xynthesis-export.mjs" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
8.4.0Low risk02026-06-17
8.3.0Low risk02026-06-15
8.2.0Low risk02026-06-14
8.1.12Low risk02026-06-14
8.1.11Low risk02026-06-14
8.1.10Low risk02026-06-13
8.1.9Low risk02026-06-12
7.2.0High risk452026-06-10
8.1.7Low risk02026-06-09
8.1.8Low risk02026-06-09
8.1.5Low risk02026-06-08
8.1.4Low risk02026-06-08
8.1.2Low risk02026-06-07
8.1.1Low risk02026-06-07
8.1.0Low risk02026-06-07
8.0.1Low risk02026-06-07
8.0.0Low risk02026-06-06
7.8.2Low risk02026-06-05
7.8.1Low risk02026-06-05
7.8.0Low risk02026-06-05
7.7.8Low risk02026-06-04
7.7.7Low risk02026-06-04
7.7.5Low risk02026-06-04
7.7.3Low risk02026-06-04
7.7.1Low risk02026-06-03
7.7.0Low risk02026-06-03
7.6.0Low risk02026-06-01
7.5.1Low risk02026-06-01
7.5.0Low risk02026-06-01
7.4.3Low risk02026-05-31
7.4.2Low risk02026-05-31
7.4.1Low risk02026-05-31
7.4.0Low risk02026-05-31
7.3.11Low risk02026-05-31
7.3.10Low risk02026-05-31
7.3.8Low risk02026-05-31
7.3.9Low risk02026-05-31
7.3.3Low risk02026-05-31
7.3.1Low risk02026-05-30
7.3.0Low risk02026-05-30
7.2.15Low risk02026-05-30
7.2.16Low risk02026-05-30
7.2.14Low risk02026-05-30
7.2.13Low risk02026-05-30
7.2.10Low risk02026-05-29
7.2.9Low risk02026-05-29
7.2.7Low risk02026-05-28
7.2.4Low risk02026-05-28
7.2.5Low risk02026-05-28
7.2.3Review52026-05-28
7.0.2Low risk02026-05-27
7.0.0Low risk02026-05-27
7.0.1Low risk02026-05-27

Campaign attribution

Part of the asteroiddao npm campaign campaign.

Related campaigns

Block this in CI

PkgRadar gates @exellix/graph-engine (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @exellix/[email protected]