npm · registry.npmjs.org
@kubeasy-dev/kubeasy-cli
Install Lifecycle Remote Or Exec: postinstall="node install.js"
Why PkgRadar flagged 3.0.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Remote Or Exec | postinstall="node install.js" · package.json |
| medium | Remote Payload | matched "curl " · package/.github/workflows/update-openapi-client.yaml |
| medium | Remote Payload | matched "curl " · package/.github/workflows/prerelease.yml |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
3.0.0 | Review | 19 | 2026-05-25 |
3.1.0 | Review | 19 | 2026-05-25 |
Block this in CI
pkgradar gate --ecosystem npm @kubeasy-dev/[email protected]