PkgRadar

npm · registry.npmjs.org

@maitxnorg/publish-then-install-test-package

Suspicious Publish Context: {"package_age_days":2,"publisher":"maitxn","burst_same_day":11,"burst_week":45,"lure":null,"version_anomaly":false}

Why PkgRadar flagged 0.0.3-1781227646-cd3abe27

SeveritySignalEvidence
mediumSuspicious Publish Context{"package_age_days":2,"publisher":"maitxn","burst_same_day":11,"burst_week":45,"lure":null,"version_anomaly":false}

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.3-1781227646-cd3abe27Review102026-06-12
0.0.3-1781141117-c8a41456Low risk02026-06-11
0.0.3-1781131248-d9e8f5a0Low risk02026-06-10
0.0.3-1781130718-84da935cLow risk02026-06-10
0.0.3-1781130616-0099a1b3Low risk02026-06-10
0.0.3-1781126890-bad83b61Low risk02026-06-10
0.0.3-1781126895-3888bd29Low risk02026-06-10
0.0.3-1781126103-edc54f7dLow risk02026-06-10
0.0.3-1781126044-558b031eLow risk02026-06-10

Block this in CI

PkgRadar gates @maitxnorg/publish-then-install-test-package (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @maitxnorg/[email protected]