npm · registry.npmjs.org
@tom2012/cc-web
Install Lifecycle Suppresses Failure: postinstall="npx electron-builder install-app-deps || true"
Why PkgRadar flagged 2026.6.13-e
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Suppresses Failure | postinstall="npx electron-builder install-app-deps || true" · package.json |
| medium | Remote Payload | matched "raw.githubusercontent.com" · package/backend/dist/routes/update.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2026.6.13-e | High risk | 52 | 2026-06-13 |
2026.6.13-d | High risk | 52 | 2026-06-13 |
2026.6.13-c | High risk | 52 | 2026-06-13 |
2026.6.13-b | High risk | 40 | 2026-06-13 |
2026.6.13-a | High risk | 40 | 2026-06-12 |
2026.6.12-c | High risk | 40 | 2026-06-12 |
2026.6.12-b | High risk | 40 | 2026-06-12 |
2026.6.12-a | High risk | 40 | 2026-06-12 |
2026.5.24-h | High risk | 40 | 2026-06-10 |
2026.6.8-a | High risk | 40 | 2026-06-10 |
2026.5.24-a | High risk | 40 | 2026-06-10 |
2026.5.24-f | High risk | 40 | 2026-06-10 |
2026.5.24-e | High risk | 40 | 2026-06-10 |
2026.5.24-g | High risk | 40 | 2026-06-10 |
2026.5.24-c | High risk | 40 | 2026-06-10 |
2026.5.24-i | High risk | 40 | 2026-06-10 |
2026.5.24-d | High risk | 40 | 2026-06-10 |
2026.5.24-b | High risk | 40 | 2026-06-10 |
2026.5.24-j | High risk | 40 | 2026-06-10 |
Block this in CI
pkgradar gate --ecosystem npm @tom2012/[email protected]