npm · registry.npmjs.org
@pokeme/cli
Install Lifecycle Remote Or Exec: postinstall="node -e \"try{var p=require('path'),f=require('fs'),h=p.join(require.resolve('node-pty/package.json'),'..','prebuilds',process.platform+'-'+process.arch,'spawn-helper');if(f.existsSync(h))f.chmodSync(h,0o755)}catch(e){}\""
Why PkgRadar flagged 0.1.6
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Remote Or Exec | postinstall="node -e \"try{var p=require('path'),f=require('fs'),h=p.join(require.resolve('node-pty/package.json'),'..','prebuilds',process.platform+'-'+process.arch,'spawn-helper');if(f.existsSync(h))f.chmodSync(h,0o755)}catch(e){}\"" · package.json |
| medium | New Account With Lifecycle Hook | package first published 62 day(s) ago, 8 total version(s), has lifecycle hook · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.1.6 | High risk | 35 | 2026-06-10 |
0.1.7 | High risk | 80 | 2026-06-10 |
Campaign attribution
Block this in CI
pkgradar gate --ecosystem npm @pokeme/[email protected]