PkgRadar

npm · registry.npmjs.org

nano-brain

Install-time lifecycle script: postinstall="node npm/postinstall.js"

Why PkgRadar flagged 2026.6.101

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspostinstall added in 2026.6.101 vs 2026.6.26: "node npm/postinstall.js" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.6.1701Review32026-06-17
2026.6.1511Review32026-06-15
2026.6.1510Review32026-06-15
2026.6.1509Review32026-06-15
2026.6.1508Review32026-06-15
2026.6.1507Review32026-06-15
2026.6.1506Review32026-06-15
2026.6.1505Review32026-06-15
2026.6.1504Review32026-06-15
2026.6.1503Review32026-06-15
2026.6.1502Review32026-06-15
2026.6.1501Review32026-06-15
2026.6.1405Review32026-06-14
2026.6.1404Review32026-06-14
2026.6.1403Review32026-06-14
2026.6.1402Review32026-06-14
2026.6.1401Review32026-06-14
2026.6.1301Review32026-06-13
2026.6.1101Review32026-06-11
2026.8.19Low risk02026-06-10
2026.8.18-beta.1Low risk02026-06-10
2026.8.18Low risk02026-06-10
2026.6.1001Review32026-06-10
2026.6.101High risk452026-06-10
2026.5.25-beta.25High risk452026-06-10
2026.6.903Review32026-06-09
2026.6.902Review32026-06-09
2026.6.901Review32026-06-09
2026.6.705Review32026-06-07
2026.6.704Review32026-06-07
2026.6.702Review32026-06-07
2026.6.703Review32026-06-07
2026.6.701Review32026-06-07
2026.6.606Review52026-06-06
2026.6.605Review32026-06-06
2026.6.604Review32026-06-06
2026.6.603Review32026-06-06
2026.6.602Review32026-06-06
2026.6.601Review32026-06-06
2026.6.512Review52026-06-05
2026.6.511Review52026-06-05
2026.6.510Review52026-06-05
2026.6.504Review32026-06-05
2026.6.503Review32026-06-05
2026.6.502Review32026-06-05
2026.6.501Review32026-06-05
2026.6.404Review52026-06-04
2026.6.403Review52026-06-04
2026.6.401Review52026-06-04
2026.6.313Review32026-06-03
2026.6.314Review52026-06-03
2026.6.311Review32026-06-03
2026.6.310Review52026-06-03
2026.6.309Review32026-06-03
2026.6.308Review32026-06-03
2026.6.307Review32026-06-03
2026.6.306Review32026-06-03
2026.6.305Review32026-06-03
2026.6.304Review32026-06-03
2026.6.303Review32026-06-03
2026.6.302Review32026-06-03
2026.6.301Review32026-06-03
2026.6.209Review32026-06-02
2026.6.207Review52026-06-02
2026.6.208Review52026-06-02
2026.6.205Review32026-06-02
2026.6.204Review32026-06-02
2026.6.203Review52026-06-02
2026.6.202Review32026-06-02
2026.6.201Review32026-06-02
2026.6.107Review52026-06-01
2026.6.108Review52026-06-01
2026.6.104Review52026-06-01
2026.6.105Review52026-06-01
2026.6.103Review52026-06-01
2026.6.102Review52026-06-01
2026.5.3105Review32026-05-31
2026.5.3104Review32026-05-31
2026.5.3103Review32026-05-31
2026.5.3102Review32026-05-31
2026.5.3101Review32026-05-31
2026.5.2902Review52026-05-30
2026.5.2901Review52026-05-30
2026.5.2715Review32026-05-30
2026.5.2714Review52026-05-30
2026.5.2713Review32026-05-30
2026.5.3008Review32026-05-30
2026.5.267Review32026-05-30
2026.5.265Review32026-05-30
2026.5.266Review52026-05-30
2026.5.264Review52026-05-30
2026.5.263Review32026-05-30
2026.5.262Review32026-05-30
2026.5.261Review32026-05-30
2026.5.26Review32026-05-30
2026.5.25-beta.30Review32026-05-30
2026.5.25-beta.31Review32026-05-30
2.0.0-beta.6Review52026-05-30
2.0.0-beta.5Review52026-05-30
2.0.0-beta.4Review52026-05-30
2.0.0-beta.3Review52026-05-30
2.0.0-beta.2Review52026-05-30
2026.5.3007Review32026-05-30
2026.5.3006Review32026-05-30
2026.5.30Review32026-05-30
2026.5.3004Review32026-05-30
2026.5.2903Review32026-05-30

Campaign attribution

Part of the asteroiddao npm campaign campaign.

Block this in CI

PkgRadar gates nano-brain (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence