npm · registry.npmjs.org

@tinyfox/shapecheck

no static findings

Early detection

PkgRadar flagged this 8.3 days before public disclosure

Detected 2026-06-14 · disclosed as MAL-2026-6312 on 2026-06-22

Scanned versions

Version	Verdict	Scanned (UTC)
`0.0.1-security`	High risk	2026-08-13
`0.8.6`	High risk	2026-06-23
`0.8.5`	High risk	2026-06-23
`0.7.4`	High risk	2026-06-23
`0.8.7`	High risk	2026-06-23

Block this in CI

PkgRadar gates @tinyfox/shapecheck (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @tinyfox/[email protected]