PkgRadar

npm · registry.npmjs.org

@hasna/assistants

Install Lifecycle Suppresses Failure: postinstall="mkdir -p $HOME/.hasna/assistants/{logs,temp,messages,backups,connectors,workspaces,agents} 2>/dev/null || true; node scripts/patch-opentui.mjs 2>/dev/null || true"

Why PkgRadar flagged 1.1.145

SeveritySignalEvidence
highInstall Lifecycle Suppresses Failurepostinstall="mkdir -p $HOME/.hasna/assistants/{logs,temp,messages,backups,connectors,workspaces,agents} 2>/dev/null || true; node scripts/patch-opentui.mjs 2>/dev/null || true" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.145High risk252026-06-10
1.1.146High risk252026-06-10
1.1.141High risk172026-06-10
1.1.147High risk172026-06-10
1.1.139High risk172026-06-10
1.1.140High risk252026-06-10

Related campaigns

Block this in CI

PkgRadar gates @hasna/assistants (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @hasna/[email protected]