npm · registry.npmjs.org
@tpsdev-ai/flair
Install Lifecycle Remote Or Exec: postinstall="node -e \"try{const{chmodSync,statSync}=require('fs');const p='dist/cli.js';if(statSync(p).isFile()){chmodSync(p,0o755);console.error('@tpsdev-ai/flair: chmod +x ' + p + ' OK')}}catch(e){if(e.code!=='ENOENT')console.error('postinstall warn:',e.message)}\""
Why PkgRadar flagged 0.9.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Remote Or Exec | postinstall="node -e \"try{const{chmodSync,statSync}=require('fs');const p='dist/cli.js';if(statSync(p).isFile()){chmodSync(p,0o755);console.error('@tpsdev-ai/flair: chmod +x ' + p + ' OK')}}catch(e){if(e.code!=='ENOENT')console.error('postinstall warn:',e.message)}\"" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.9.0 | High risk | 35 | 2026-06-13 |
0.10.0 | High risk | 35 | 2026-06-13 |
0.8.3 | High risk | 35 | 2026-06-11 |
0.10.1 | High risk | 35 | 2026-06-10 |
Campaign attribution
Block this in CI
pkgradar gate --ecosystem npm @tpsdev-ai/[email protected]