PkgRadar

npm · registry.npmjs.org

@simonyea/holysheep-cli

Js Hidden Powershell: Hidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers.

Why PkgRadar flagged 2.1.97

SeveritySignalEvidence
highJs Hidden PowershellHidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers. · package/dist/index.js
mediumRemote Payloadmatched "Invoke-WebRequest" · package/dist/configure-worker.js
mediumRemote Payloadmatched "Invoke-WebRequest" · package/dist/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.1.97Review482026-06-17
2.1.95Review482026-06-16
2.1.96Review482026-06-16
2.1.94Review692026-06-12
2.0.2Review862026-06-11
2.1.83Review742026-06-11
2.1.93Review692026-06-11
2.1.92Review692026-06-11
2.1.91Review692026-06-08
2.1.90Review692026-06-08
2.1.89Review692026-06-08
2.1.88Review742026-06-06
2.1.87Review742026-06-04
2.1.86Review742026-06-04
2.1.84Review742026-06-01
2.1.85Review742026-06-01

Block this in CI

PkgRadar gates @simonyea/holysheep-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @simonyea/[email protected]
Start free — 25 scans / moView full evidence