npm · registry.npmjs.org

@jackuait/blok

Why PkgRadar flagged 0.19.1

Severity	Signal	Evidence
high	Reverse Shell	matched "mkfifo\|mkfs\|mkisofs\|mknod\|mkswap\|mmv\|more\|most\|mount\|mtools\|mtr\|mutt\|mv\|nano\|nc\|netstat\|nice\|nl\|node\|nohup\|notify-send\|npm\|nslookup\|op\|open\|parted\|passwd\|paste\|pathchk\|ping\|pkill\|pnpm\|podman\|podman-compose\|popd\|pr\|printcap\|printenv\|ps\|pushd\|pv\|quota\|quotacheck\|quotactl\|ram\|rar\|rcp\|reboot\|remsync\|rename\|renice\|rev\|rm\|rmdir\|rpm\|rsync\|scp\|screen\|sdiff\|sed\|sendmail\|seq\|service\|sftp\|sh" — reverse-shell shape · package/dist/chunks/prism-bash-DDQ2u01V.cjs
high	Reverse Shell	matched "mkfifo\|mkfs\|mkisofs\|mknod\|mkswap\|mmv\|more\|most\|mount\|mtools\|mtr\|mutt\|mv\|nano\|nc\|netstat\|nice\|nl\|node\|nohup\|notify-send\|npm\|nslookup\|op\|open\|parted\|passwd\|paste\|pathchk\|ping\|pkill\|pnpm\|podman\|podman-compose\|popd\|pr\|printcap\|printenv\|ps\|pushd\|pv\|quota\|quotacheck\|quotactl\|ram\|rar\|rcp\|reboot\|remsync\|rename\|renice\|rev\|rm\|rmdir\|rpm\|rsync\|scp\|screen\|sdiff\|sed\|sendmail\|seq\|service\|sftp\|sh" — reverse-shell shape · package/dist/chunks/prism-bash-D4zr_u8t.mjs

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.19.1`	High risk	35	2026-06-20
`0.19.2`	High risk	35	2026-06-20
`0.19.0`	High risk	35	2026-06-20
`0.18.0`	Low risk	0	2026-06-19
`0.17.0`	Low risk	0	2026-06-19
`0.16.1`	Low risk	0	2026-06-16
`0.16.0`	Low risk	0	2026-06-16
`0.15.1`	Low risk	0	2026-06-12
`0.15.0`	Low risk	0	2026-06-12
`0.14.1`	Low risk	0	2026-06-12
`0.11.1`	Low risk	0	2026-06-12
`0.14.0`	Low risk	0	2026-06-05
`0.13.2`	Low risk	0	2026-05-29
`0.13.0`	Low risk	0	2026-05-29
`0.13.1`	Low risk	0	2026-05-29

Related campaigns

Block this in CI

PkgRadar gates @jackuait/blok (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @jackuait/[email protected]