PkgRadar

Package evidence

@hiteshmodi0624/[email protected]

Suspicious Publish Context: {"package_age_days":6,"publisher":"hiteshmodi0624","burst_same_day":0,"burst_week":1,"lure":null,"version_anomaly":false,"new_account":true}

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
3
First published
Jun 2026
Publisher
hiteshmodi0624

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@hiteshmodi0624/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@hiteshmodi0624/[email protected]"],"fail_on":"review"}'
Artifact bytes201,229
Previous version0.2.0
Published2026-06-14T06:50:25.121Z
SHA-2568b008ff66dec82d1a510b82009db4451e3044038d48d1991bf1c8ab16cd1a0d5

Why flagged

What the scanner saw

Suspicious Publish Context: {"package_age_days":6,"publisher":"hiteshmodi0624","burst_same_day":0,"burst_week":1,"lure":null,"version_anomaly":false,"new_account":true}

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review
Last checked
reviewRisk
10Score
0.3.0Version
Status history (1 event)
  1. newavailable · risk review · score 10 · status changed

Evidence

Static findings

1 static · 0 from release diff · showing high-signal first.

SeverityKindPathDetailPoints
mediumSuspicious Publish Contextmanifest{"package_age_days":6,"publisher":"hiteshmodi0624","burst_same_day":0,"burst_week":1,"lure":null,"version_anomaly":false,"new_account":true}10

Manifest

Package metadata

Scripts7
  • buildtsc -p tsconfig.build.json
  • demotsx src/demo.ts
  • formatprettier --write .
  • linteslint src --max-warnings 0
  • preparehusky && yarn build
  • sendtsx src/send.ts
  • testtsx --test src/domain/emailAddress.test.ts src/domain/phoneNumber.test.ts src/domain/messageTemplate.test.ts src/domain/renderedEmail.test.ts src/domain/renderedSms.test.ts src/domain/renderedSlack.test.ts src/domain/renderedWhatsApp.test.ts src/domain/renderedPush.test.ts src/domain/locale.test.ts src/domain/localeBundle.test.ts src/ports/channelRenderer.test.ts src/domain/smsMessage.test.ts src/domain/slackChannelRef.test.ts src/domain/slackMessage.test.ts src/domain/messageMetadataThreading.test.ts src/adapters/channels/slack/slackChannel.test.ts src/domain/webhookTarget.test.ts src/domain/webhookMessage.test.ts src/adapters/channels/webhook/webhookChannel.test.ts src/adapters/channels/http/httpPostChannel.test.ts src/domain/whatsAppMessage.test.ts src/adapters/channels/whatsapp/whatsAppChannel.test.ts src/domain/telegramChatRef.test.ts src/domain/telegramMessage.test.ts src/adapters/channels/telegram/telegramChannel.test.ts src/domain/channelLabel.test.ts src/domain/discordMessage.test.ts src/adapters/channels/discord/discordChannel.test.ts src/domain/teamsMessage.test.ts src/adapters/channels/teams/teamsChannel.test.ts src/domain/issueTarget.test.ts src/domain/issueMessage.test.ts src/adapters/channels/ticket/linearChannel.test.ts src/adapters/channels/ticket/jiraChannel.test.ts src/adapters/rendering/baseLayout.test.ts src/domain/unsubscribeEvent.test.ts src/application/channelRegistry.test.ts src/application/messageRendererRegistry.test.ts src/application/channelRendererRegistry.test.ts src/adapters/rendering/baseLayoutEmailRenderer.test.ts src/adapters/rendering/footerSlot.test.ts src/adapters/rendering/mjmlEmailRenderer.test.ts src/domain/enqueuedMessage.test.ts src/domain/digestPolicy.test.ts src/domain/deliveryEvent.test.ts src/domain/dnsRecord.test.ts src/domain/trackingPolicy.test.ts src/adapters/eventbus/inMemoryEventBus.test.ts src/adapters/tracking/trackingRewriter.test.ts src/adapters/tracking/inMemoryTrackingStore.test.ts src/adapters/dns/sesDomainRecords.test.ts src/adapters/dns/dnsLookupDomainVerification.test.ts src/application/messageDispatcher.test.ts src/application/messageRouter.test.ts src/application/deliveryPrevention.test.ts src/application/queueDispatchWorker.test.ts src/application/outboxProducer.test.ts src/application/digestService.test.ts src/application/schedulerService.test.ts src/adapters/queue/inMemoryQueue.test.ts src/adapters/queue/codec/envelopeCodec.test.ts src/adapters/queue/sqs/sqsMessageQueue.test.ts src/application/authEmailSender.test.ts src/adapters/cognito/cognitoCustomEmailSender.test.ts src/adapters/cognito/kmsCodeDecryptor.test.ts src/adapters/channels/inMemoryChannel.test.ts src/adapters/channels/ses/sesEmailChannel.test.ts src/adapters/channels/sns/snsSmsChannel.test.ts src/adapters/persistence/inMemorySuppressionStore.test.ts src/adapters/persistence/inMemoryIdempotencyStore.test.ts src/adapters/persistence/inMemoryOutbox.test.ts src/adapters/persistence/inMemoryDigestBuffer.test.ts src/adapters/persistence/inMemoryScheduler.test.ts src/adapters/persistence/dynamoIdempotencyStore.test.ts src/adapters/persistence/dynamoSuppressionStore.test.ts src/adapters/persistence/dynamoDeliveryLog.test.ts src/application/feedbackProcessor.test.ts src/application/unsubscribeProcessor.test.ts src/application/preferenceService.test.ts src/domain/consentEvent.test.ts src/adapters/persistence/inMemoryConsentLog.test.ts src/adapters/feedback/sesFeedbackParser.test.ts src/adapters/unsubscribe/hmacUnsubscribeTokenService.test.ts src/adapters/policy/inMemoryDisposableDomainPolicy.test.ts src/adapters/policy/inMemoryPreferenceStore.test.ts src/adapters/policy/identityResolvingPreferenceStore.test.ts src/adapters/policy/inMemoryCategoryPreferenceStore.test.ts src/adapters/policy/scopedPreferenceStore.test.ts src/adapters/policy/scopedCategoryPreferenceStore.test.ts src/adapters/policy/scopedFrequencyCapPolicy.test.ts src/adapters/policy/scopedConsentLog.test.ts src/adapters/policy/scopedPreferenceStore.wiring.test.ts src/adapters/persistence/dynamoPreferenceStore.test.ts src/adapters/persistence/dynamoCategoryPreferenceStore.test.ts src/adapters/persistence/dynamoTrackingStore.test.ts src/adapters/persistence/dynamoConsentLog.test.ts src/adapters/persistence/dynamoFrequencyCapPolicy.test.ts src/adapters/persistence/dynamoOutbox.test.ts src/adapters/persistence/dynamoScheduler.test.ts src/adapters/persistence/dynamoDigestBuffer.test.ts src/adapters/policy/inMemoryFrequencyCapPolicy.test.ts src/adapters/policy/tokenBucketRateLimiter.test.ts src/domain/quietHours.test.ts src/adapters/shared/retry.test.ts src/adapters/metrics/cloudwatchSesMetrics.test.ts src/composition/relayConfig.test.ts src/composition/relayFactory.test.ts src/infra/relayTables.test.ts src/infra/relaySesObservability.test.ts src/domain/templateBrief.test.ts src/domain/authoredTemplate.test.ts src/adapters/llm/inMemoryLlmClient.test.ts src/application/templateAuthoringService.test.ts src/adapters/sanitize/sanitizeHtmlSanitizer.test.ts src/domain/templateDiff.test.ts src/adapters/rendering/channelRegistryAuthoredTemplateStore.test.ts src/application/outputShape.test.ts src/domain/channelAddress.test.ts src/domain/recipientIdentity.test.ts src/domain/channelPlan.test.ts src/domain/severity.test.ts src/domain/scope.test.ts src/adapters/routing/singleChannelRoutingPolicy.test.ts src/adapters/routing/staticDeliveryPolicy.test.ts src/adapters/routing/preferenceRoutingPolicy.test.ts src/adapters/persistence/inMemoryIdentityStore.test.ts src/adapters/persistence/dynamoIdentityStore.test.ts src/adapters/persistence/inMemoryDeliveryLog.test.ts src/adapters/persistence/dynamoDeliveryLogReader.test.ts src/application/commsHistory.test.ts src/domain/deviceToken.test.ts src/domain/pushMessage.test.ts src/domain/voiceMessage.test.ts src/adapters/channels/voice/voiceChannel.test.ts src/adapters/channels/push/pushChannel.test.ts src/adapters/channels/push/fcmSender.test.ts src/adapters/channels/push/apnsSender.test.ts src/adapters/channels/push/webPushSender.test.ts src/domain/webPushKeys.test.ts src/adapters/persistence/inMemoryDeviceTokenStore.test.ts src/adapters/persistence/dynamoDeviceTokenStore.test.ts src/publicSurface.contract.test.ts src/bundleSmoke.test.ts
Dependencies6
  • @aws-sdk/client-cloudwatch^3.716.0
  • @aws-sdk/client-dynamodb^3.716.0
  • @aws-sdk/client-sesv2^3.716.0
  • @aws-sdk/client-sns^3.716.0
  • @aws-sdk/client-sqs^3.716.0
  • @aws-sdk/lib-dynamodb^3.716.0