npm · registry.npmjs.org

@sciagent/cli

Install-time lifecycle script

Early detection

PkgRadar flagged this 6h before public disclosure

Detected 2026-07-16 · disclosed as MAL-2026-10718 on 2026-07-16

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.0.69`	High risk	3	2026-08-19
`1.3.70`	Review	8	2026-08-12
`1.3.69`	Review	8	2026-08-12
`1.3.68`	Review	8	2026-08-12
`1.3.66`	Review	8	2026-08-12
`1.3.67`	Review	8	2026-08-12
`1.3.65`	Review	8	2026-08-12
`1.3.64`	Review	8	2026-08-12
`1.3.63`	Review	8	2026-08-11
`1.3.60`	Review	17	2026-08-11
`1.3.61`	Review	17	2026-08-11
`1.3.59`	Review	17	2026-08-11
`1.3.58`	Review	8	2026-08-11
`1.3.57`	Review	8	2026-08-10
`1.3.56`	Review	8	2026-08-10
`1.3.55`	Review

Block this in CI

PkgRadar gates @sciagent/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @sciagent/[email protected]