npm · registry.npmjs.org
oh-my-codex
Install Lifecycle Remote Or Exec: postinstall="node -e \"const fs=require('fs');const p='./dist/scripts/postinstall.js';if(fs.existsSync(p))import(p).then(m=>m.main?.()).catch(e=>console.warn('[omx] Postinstall skipped after a non-fatal error: '+(e?.message??e)))\""
Why PkgRadar flagged 0.18.11
| Severity | Signal | Evidence |
|---|---|---|
| high | Install Lifecycle Remote Or Exec | postinstall="node -e \"const fs=require('fs');const p='./dist/scripts/postinstall.js';if(fs.existsSync(p))import(p).then(m=>m.main?.()).catch(e=>console.warn('[omx] Postinstall skipped after a non-fatal error: '+(e?.message??e)))\"" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.18.11 | High risk | 20 | 2026-06-16 |
0.18.12 | High risk | 20 | 2026-06-16 |
0.18.10 | High risk | 20 | 2026-06-10 |
0.18.9 | High risk | 20 | 2026-06-10 |
0.18.8 | Review | 5 | 2026-06-01 |
0.18.6 | Review | 5 | 2026-05-30 |
0.18.5 | Review | 10 | 2026-05-30 |
0.18.4 | Review | 5 | 2026-05-30 |
0.18.2 | Review | 5 | 2026-05-30 |
0.18.3 | Review | 10 | 2026-05-30 |
0.18.7 | Review | 5 | 2026-05-30 |
Campaign attribution
Block this in CI
pkgradar gate --ecosystem npm [email protected]