npm · registry.npmjs.org
@senlabsai/aigon
Install Lifecycle Suppresses Failure: postinstall="node ./aigon-cli.js global-setup --non-interactive --quiet || true && node scripts/fix-node-pty-perms.js || true && node ./aigon-cli.js installed-notice || true"
Why PkgRadar flagged 2.66.0-beta.4
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Suppresses Failure | postinstall="node ./aigon-cli.js global-setup --non-interactive --quiet || true && node scripts/fix-node-pty-perms.js || true && node ./aigon-cli.js installed-notice || true" · package.json |
| medium | Remote Payload | matched "curl " · package/lib/proxy.js |
| medium | New Account With Lifecycle Hook | package first published 33 day(s) ago, 9 total version(s), has lifecycle hook · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.66.0-beta.4 | High risk | 37 | 2026-06-10 |
2.66.0-beta.2 | High risk | 37 | 2026-06-10 |
2.66.0-beta.3 | High risk | 37 | 2026-06-10 |
Block this in CI
pkgradar gate --ecosystem npm @senlabsai/[email protected]