Loading the latest scan…
npm · registry.npmjs.org
New Account With Lifecycle Hook, Install-time lifecycle script
Why PkgRadar flagged 0.2.0-rc.1
| Severity | Signal | Evidence |
|---|---|---|
| high | New Account With Lifecycle Hook | — |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.2.0-rc.11 | Review | 5 | 2026-07-16 |
0.2.0-rc.10 | Review | 5 | 2026-07-15 |
0.2.0-rc.9 | Review | 5 | 2026-07-15 |
0.2.0-rc.8 | Review | 5 | 2026-07-15 |
0.2.0-rc.7 | Review | 5 | 2026-07-14 |
0.2.0-rc.6 | Review | 5 | 2026-07-14 |
0.2.0-rc.5 | Review | 5 | 2026-07-08 |
0.2.0-rc.4 | Review | 5 | 2026-07-06 |
0.2.0-rc.3 | Review | 5 | 2026-07-06 |
0.2.0-rc.2 | Review | 5 | 2026-07-02 |
0.2.0-rc.1 | High risk | 5 | 2026-06-30 |
0.1.0-rc.10 | High risk | 5 | 2026-06-29 |
0.1.0-rc.9 | High risk | 5 | 2026-06-29 |
0.1.0-rc.8 | High risk | 5 | 2026-06-26 |
0.1.0-rc.7 | Low risk | 0 | 2026-06-01 |
Block this in CI
pkgradar gate --ecosystem npm @daocloud-cli/[email protected]