npm · registry.npmjs.org
synapse-cortex
Install-time lifecycle script: postinstall="node -e \"try{require('child_process').execSync('node scripts/runtime/install-synapse-skill.mjs --quiet',{stdio:'ignore'})}catch(e){}\""
Why PkgRadar flagged 2026.5.4
| Severity | Signal | Evidence |
|---|---|---|
| high | Install-time lifecycle script | postinstall="node -e \"try{require('child_process').execSync('node scripts/runtime/install-synapse-skill.mjs --quiet',{stdio:'ignore'})}catch(e){}\"" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2026.5.4 | Review | 5 | 2026-05-25 |
2026.5.5-beta.0 | Review | 5 | 2026-05-25 |
Related campaigns
- thejenildgohel — 2 releases, max score 60
- install_lifecycle_script:postinstall="node -e \"try{require('child_process').execsync('node scripts/runtime/install-synapse-skill.mjs --quiet',{stdio:'ignore'})}catch(e){}\"" — 2 releases, max score 60
- install_lifecycle_script:postinstall="node -e \"try{require('child_process').execSync('node scripts/runtime/install-synapse-skill.mjs --quiet',{stdio:'ignore'})}catch(e){}\"" — 2 releases, max score 60
Block this in CI
pkgradar gate --ecosystem npm [email protected]