PkgRadar

npm · registry.npmjs.org

nuxs-capsule

Install Lifecycle Remote Or Exec: postinstall="node -e \"const v=require('./package.json').version;console.log('\\nnuxs-capsule v'+v+' installed. Run: nuxs-capsule setup\\n')\""

Why PkgRadar flagged 0.1.30

SeveritySignalEvidence
highInstall Lifecycle Remote Or Execpostinstall="node -e \"const v=require('./package.json').version;console.log('\\nnuxs-capsule v'+v+' installed. Run: nuxs-capsule setup\\n')\"" · package.json
mediumRemote Payloadmatched "curl " · package/dist/install 2.js
mediumRemote Payloadmatched "curl " · package/dist/install.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.30High risk342026-06-13
0.1.29High risk692026-06-13
0.1.27High risk262026-06-13
0.1.28High risk262026-06-13
0.5.67High risk362026-06-13
0.5.66High risk362026-06-13
0.5.64High risk362026-06-13
0.5.58High risk362026-06-12
0.5.59High risk362026-06-12
0.5.56High risk362026-06-12
0.5.55High risk362026-06-12
0.5.54High risk362026-06-12
0.5.53High risk362026-06-12
0.5.52High risk362026-06-12
0.5.51High risk362026-06-12
0.5.50High risk362026-06-12
0.5.49High risk362026-06-12
0.5.48High risk362026-06-12
0.5.47High risk362026-06-12
0.5.46High risk362026-06-12
0.5.44High risk362026-06-12
0.5.45High risk362026-06-12
0.5.43High risk362026-06-12
0.5.41High risk362026-06-12
0.5.40High risk362026-06-12
0.5.39High risk362026-06-12
0.5.38High risk362026-06-12
0.5.37High risk362026-06-11
0.5.36High risk362026-06-11
0.5.35High risk362026-06-11
0.5.34High risk362026-06-11
0.5.33High risk362026-06-10
0.5.32High risk362026-06-10
0.5.31High risk362026-06-10
0.5.30High risk522026-06-10
0.1.26High risk362026-06-10
0.1.24High risk522026-06-10
0.1.25High risk522026-06-10
0.1.18High risk362026-06-10
0.1.20High risk362026-06-10
0.5.28High risk362026-06-10
0.5.27High risk522026-06-10
0.5.26High risk362026-06-10
0.5.25High risk362026-06-10
0.5.24High risk522026-06-10
0.5.23High risk362026-06-10
0.5.22High risk522026-06-10
0.5.21High risk522026-06-10
0.5.19High risk522026-06-10
0.5.18High risk522026-06-10
0.5.17High risk522026-06-10
0.5.15High risk522026-06-10
0.5.14High risk362026-06-10
0.5.12High risk522026-06-10
0.5.11High risk522026-06-10
0.5.10High risk522026-06-10
0.5.6High risk522026-06-10
0.5.9High risk522026-06-10
0.5.8High risk362026-06-10
0.5.5High risk522026-06-10
0.5.3High risk522026-06-10
0.5.1High risk362026-06-10
0.5.0High risk362026-06-10
0.4.0High risk362026-06-10
0.3.8High risk522026-06-10
0.3.4High risk362026-06-10
0.3.2High risk362026-06-10
0.3.1High risk522026-06-10
0.3.0High risk522026-06-10
0.1.62High risk522026-06-10
0.1.61High risk692026-06-10
0.1.60High risk482026-06-10
0.1.59High risk692026-06-10
0.1.58High risk362026-06-10
0.1.57High risk522026-06-10
0.1.56High risk362026-06-10
0.1.52High risk522026-06-10
0.1.53High risk522026-06-10
0.1.51High risk362026-06-10
0.1.50High risk362026-06-10
0.1.49High risk362026-06-10
0.1.48High risk362026-06-10
0.1.47High risk362026-06-10
0.1.46High risk362026-06-10
0.1.45High risk362026-06-10
0.5.29High risk362026-06-10
0.1.41High risk362026-06-10
0.1.35High risk362026-06-10
0.1.32High risk362026-06-10
0.1.31High risk482026-06-10
0.1.13Review172026-05-28
0.1.14Review172026-05-28
0.1.2Review172026-05-26
0.1.3Review172026-05-26

Campaign attribution

Part of the Clob dropper campaign.

Block this in CI

PkgRadar gates nuxs-capsule (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence