PkgRadar

npm · registry.npmjs.org

agent-relay-server

Install-time lifecycle script: postinstall="node scripts/install-bin-shim.cjs"

Why PkgRadar flagged 0.10.19

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspostinstall added in 0.10.19 vs 0.10.18: "node scripts/install-bin-shim.cjs" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.65.2Review52026-06-17
0.65.1Review52026-06-17
0.65.0Review52026-06-17
0.64.1Review52026-06-17
0.64.0Review52026-06-17
0.63.2Review102026-06-17
0.63.1Review52026-06-17
0.63.0Review52026-06-17
0.62.3Review52026-06-16
0.62.2Review52026-06-16
0.62.1Review52026-06-16
0.62.0Review52026-06-16
0.61.2Review52026-06-16
0.61.1Review52026-06-16
0.61.0Review52026-06-16
0.60.0Review52026-06-15
0.60.1Review52026-06-15
0.59.0Review52026-06-15
0.57.2Review52026-06-15
0.58.0Review52026-06-15
0.57.1Review52026-06-15
0.57.0Review72026-06-15
0.56.2Review72026-06-14
0.56.1Review72026-06-14
0.56.0Review72026-06-14
0.55.0Review72026-06-14
0.53.0Review72026-06-14
0.54.0Review72026-06-14
0.52.0Review72026-06-14
0.51.0Review72026-06-14
0.50.0Review72026-06-14
0.49.0Review72026-06-14
0.47.0Review102026-06-14
0.48.0Review102026-06-14
0.46.0Review72026-06-14
0.45.0Review72026-06-14
0.44.0Review72026-06-14
0.43.0Review72026-06-14
0.42.0Review72026-06-14
0.41.0Review72026-06-13
0.40.0Review72026-06-13
0.38.0Review72026-06-13
0.39.0Review72026-06-13
0.37.0Review72026-06-12
0.36.2Review72026-06-12
0.36.1Review72026-06-12
0.36.0Review72026-06-12
0.35.4Review72026-06-12
0.35.3Review72026-06-12
0.35.2Review72026-06-12
0.35.1Review72026-06-12
0.35.0Review72026-06-12
0.34.1Review72026-06-11
0.34.0Review72026-06-11
0.33.1Review72026-06-11
0.33.0Review72026-06-11
0.32.4Review102026-06-11
0.32.3Review102026-06-11
0.32.2Review72026-06-10
0.32.1Review72026-06-10
0.31.1Review32026-06-10
0.31.0Review32026-06-10
0.30.1Review32026-06-10
0.30.0Review32026-06-10
0.29.0Review32026-06-10
0.28.0Review32026-06-10
0.27.2Review32026-06-10
0.27.1Review32026-06-10
0.10.19High risk452026-06-10
0.27.0Review32026-06-09
0.26.0Review32026-06-09
0.25.0Review32026-06-09
0.24.0Review32026-06-09
0.23.0Review32026-06-09
0.22.0Review32026-06-09
0.21.0Review32026-06-08
0.20.0Review52026-06-08
0.19.3Review52026-06-08
0.19.2Review32026-06-07
0.19.1Review32026-06-07
0.19.0Review32026-06-07
0.18.0Review32026-06-06
0.17.0Review32026-06-06
0.16.0Review32026-06-06
0.15.1Review52026-06-05
0.15.0Review32026-06-05
0.14.0Review32026-06-05
0.13.0Review32026-06-05
0.12.4Review32026-06-05
0.12.3Review52026-06-04
0.12.2Review32026-06-04
0.12.1Review32026-06-04
0.11.8Review32026-06-04
0.11.6Review52026-06-03
0.11.5Review32026-06-03
0.11.4Review52026-06-03
0.11.3Review52026-06-02
0.11.1Review52026-06-02
0.11.2Review52026-06-02
0.10.26Review52026-06-01
0.10.25Review52026-06-01
0.10.23Review52026-06-01
0.10.24Review52026-06-01
0.10.21Review52026-05-31
0.10.20Review52026-05-30

Campaign attribution

Part of the asteroiddao npm campaign campaign.

Block this in CI

PkgRadar gates agent-relay-server (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence