npm · registry.npmjs.org
crewly
Install Lifecycle Suppresses Failure: postinstall="(npm rebuild node-pty --build-from-source 2>/dev/null || npm rebuild node-pty 2>/dev/null || true) && (npm rebuild better-sqlite3 2>/dev/null || true)"
Why PkgRadar flagged 1.11.6
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Suppresses Failure | postinstall="(npm rebuild node-pty --build-from-source 2>/dev/null || npm rebuild node-pty 2>/dev/null || true) && (npm rebuild better-sqlite3 2>/dev/null || true)" · package.json |
| medium | Remote Payload | matched "curl " · package/dist/backend/backend/src/services/browser/chrome-discovery.service.js |
| medium | Remote Payload | matched "curl " · package/config/skills/_common/complete-body-shape.test.sh |
| medium | Remote Payload | matched "curl " · package/config/skills/agent/core/create-intent-tasks/execute.sh |
| medium | Remote Payload | matched "curl " · package/config/skills/agent/core/decompose-intent/execute.sh |
| medium | Remote Payload | matched "curl " · package/config/skills/agent/core/update-intent-task/execute.sh |
| medium | Remote Payload | matched "curl " · package/config/skills/agent/marketing/submit-for-approval/execute.sh |
| medium | Remote Payload | matched "curl " · package/config/skills/agent/screenshot-compare/execute.sh |
| medium | Remote Payload | matched "curl " · package/config/skills/agent/transcribe-audio/execute.sh |
| medium | Remote Payload | matched "curl " · package/config/skills/agent/xiaoyuzhoufm-transcript/execute.sh |
| medium | Remote Payload | matched "curl " · package/config/skills/orchestrator/decompose-mission/execute.sh |
| medium | Remote Payload | matched "curl " · package/config/skills/orchestrator/decompose-okr/execute.sh |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.12.1 | Review | 65 | 2026-06-12 |
1.12.0 | Review | 65 | 2026-06-12 |
1.11.6 | High risk | 63 | 2026-06-10 |
1.11.5 | High risk | 63 | 2026-06-10 |
1.11.4 | High risk | 63 | 2026-06-10 |
1.11.3 | High risk | 63 | 2026-06-10 |
1.11.2 | High risk | 63 | 2026-06-10 |
1.11.1 | High risk | 63 | 2026-06-10 |
1.11.0 | High risk | 63 | 2026-06-10 |
1.10.0 | High risk | 63 | 2026-06-10 |
1.9.0 | High risk | 63 | 2026-06-10 |
1.8.7 | High risk | 63 | 2026-06-10 |
1.8.8 | High risk | 63 | 2026-06-10 |
1.8.13 | High risk | 63 | 2026-06-10 |
1.8.12 | High risk | 63 | 2026-06-10 |
1.8.11 | High risk | 63 | 2026-06-10 |
1.8.9 | High risk | 63 | 2026-06-10 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]