npm · registry.npmjs.org
memoir-cli
Install Lifecycle Remote Or Exec: postinstall="node -e \"try{const c='\\x1b[36m',r='\\x1b[0m',g='\\x1b[90m';console.log('\\n '+c+'memoir'+r+' installed.\\n Run '+c+'memoir activate'+r+' in any project to give your AI long-term memory.\\n '+g+'https://memoir.sh'+r+'\\n')}catch{}\""
Why PkgRadar flagged 3.9.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Remote Or Exec | postinstall="node -e \"try{const c='\\x1b[36m',r='\\x1b[0m',g='\\x1b[90m';console.log('\\n '+c+'memoir'+r+' installed.\\n Run '+c+'memoir activate'+r+' in any project to give your AI long-term memory.\\n '+g+'https://memoir.sh'+r+'\\n')}catch{}\"" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
3.9.0 | High risk | 35 | 2026-06-10 |
3.8.1 | Review | 5 | 2026-05-29 |
3.7.1 | Review | 5 | 2026-05-29 |
3.8.0 | Review | 5 | 2026-05-29 |
Campaign attribution
Block this in CI
pkgradar gate --ecosystem npm [email protected]