npm · registry.npmjs.org
ralphctl
Js Hidden Powershell: Hidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers.
Why PkgRadar flagged 0.9.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Js Hidden Powershell | Hidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers. · package/dist/cli.mjs |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.9.0 | Review | 31 | 2026-06-01 |
0.8.6 | Review | 45 | 2026-05-29 |
0.8.5 | Review | 45 | 2026-05-29 |
0.8.4 | Review | 45 | 2026-05-29 |
0.8.3 | Review | 45 | 2026-05-28 |
0.8.2 | Review | 12 | 2026-05-26 |
0.8.1 | Review | 12 | 2026-05-25 |
0.7.3 | Low risk | 0 | 2026-05-24 |
0.8.0 | Review | 30 | 2026-05-24 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]