Loading the latest scan…
npm · registry.npmjs.org
Install-time lifecycle script, Large Javascript Payload, New Lifecycle Script Vs Previous
Why PkgRadar flagged 1.7.0
| Severity | Signal | Evidence |
|---|---|---|
| high | New Lifecycle Script Vs Previous | — |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.7.7 | Review | 20 | 2026-07-14 |
1.7.6 | Review | 20 | 2026-07-13 |
1.7.5 | Review | 40 | 2026-07-13 |
1.7.0 | High risk | 5 | 2026-06-23 |
1.6.6 | High risk | 7 | 2026-06-23 |
1.7.3 | Low risk | 0 | 2026-06-09 |
1.7.2 | Low risk | 0 | 2026-06-09 |
1.7.1 | Low risk | 0 | 2026-06-09 |
1.6.9 | Low risk | 0 | 2026-06-06 |
1.6.8 | Low risk | 0 | 2026-06-06 |
1.6.7 | Low risk | 0 | 2026-06-06 |
1.6.5 | Low risk | 0 | 2026-06-05 |
1.6.4 | Low risk | 0 | 2026-06-05 |
1.6.2 | Low risk | 0 | 2026-06-05 |
1.6.3 | Low risk | 0 | 2026-06-05 |
Campaign attribution
Block this in CI
pkgradar gate --ecosystem npm @ubedsockets/[email protected]