PkgRadar

npm · registry.npmjs.org

pretie_x2

New Account With Lifecycle Hook: package first published 3 day(s) ago, 4 total version(s), has lifecycle hook

Early detection

PkgRadar flagged this 16h before public disclosure

Detected 2026-06-16 · disclosed as MAL-2026-5920 on 2026-06-16

Why PkgRadar flagged 3.8.7

SeveritySignalEvidence
highNew Account With Lifecycle Hookpackage first published 3 day(s) ago, 4 total version(s), has lifecycle hook · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
3.8.7High risk52026-06-19
3.8.6High risk52026-06-19
3.8.5High risk52026-06-19

Block this in CI

PkgRadar gates pretie_x2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]