Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Weekly downloads
- 92
- Versions published
- 87Established · −30% score
- First published
- Dec 2025
- Publisher
- jobrayan
Effective trust discount applied: −30% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.
Recommended action
Block this updateStatic evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["[email protected]"],"fail_on":"high"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["[email protected]"],"fail_on":"high"}'Why flagged
What the scanner saw
Js Fs Walk Exfil
1 candidate cluster(s) currently reference this release.
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk high · score 214 · status changed
Related candidates
Linked campaigns and clusters
Publisher burst: jobrayan
2 members · evidence strength 61Publisher burst: jobrayan
2 members · max score 214Evidence
Static findings
67 static · 1 from release diff · showing high-signal first.
Showing 30 of 58 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| high | Js Fs Walk Exfil | package/dist/chunk-12dkd74n.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-3q2d4xh5.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-am5pq8nt.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-b8d24ts4.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-gdd0nxj3.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-hp3b6k4j.js | — | 45 |
| high | Js Remote Npm Install | package/dist/chunk-nn1ayzr0.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-pt667scp.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-pz313yq8.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-whttf0jv.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-y01frwjd.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-y9b18qce.js | — | 45 |
| high | New Lifecycle Script Vs Previous | package.json | — | 40 |
| medium | Remote Payload | package/dist/chunk-am5pq8nt.js | — | 12 |
| medium | Remote Payload | package/dist/chunk-b8d24ts4.js | — | 12 |
| medium | Remote Payload | package/dist/chunk-hp3b6k4j.js | — | 12 |
| medium | Remote Payload | package/dist/chunk-pt667scp.js | — | 12 |
| medium | Remote Payload | package/dist/chunk-pz313yq8.js | — | 12 |
| medium | Remote Payload | package/dist/chunk-y9b18qce.js | — | 12 |
| medium | Credential file access | package/dist/chunk-12dkd74n.js | — | 10 |
| medium | Credential file access | package/dist/chunk-2fv9089a.js | — | 10 |
| medium | Credential file access | package/dist/chunk-2rnhm735.js | — | 10 |
| medium | Credential file access | package/dist/chunk-3q2d4xh5.js | — | 10 |
| medium | Credential file access | package/dist/chunk-4j5qzvpm.js | — | 10 |
| medium | Credential file access | package/dist/chunk-4wqw507q.js | — | 10 |
| medium | Credential file access | package/dist/chunk-4zpqh818.js | — | 10 |
| medium | Credential file access | package/dist/chunk-5zensta2.js | — | 10 |
| medium | Credential file access | package/dist/chunk-6rqp5q3j.js | — | 10 |
| medium | Credential file access | package/dist/chunk-6x2asdvn.js | — | 10 |
| medium | Credential file access | package/dist/chunk-71pxbqa6.js | — | 10 |
Show all 68 findings (low-signal and informational)
Showing 60 of 68 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| high | Js Fs Walk Exfil | package/dist/chunk-12dkd74n.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-3q2d4xh5.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-am5pq8nt.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-b8d24ts4.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-gdd0nxj3.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-hp3b6k4j.js | — | 45 |
| high | Js Remote Npm Install | package/dist/chunk-nn1ayzr0.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-pt667scp.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-pz313yq8.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-whttf0jv.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-y01frwjd.js | — | 45 |
| high | Js Fs Walk Exfil | package/dist/chunk-y9b18qce.js | — | 45 |
| high | New Lifecycle Script Vs Previous | package.json | — | 40 |
| medium | Remote Payload | package/dist/chunk-am5pq8nt.js | — | 12 |
| medium | Remote Payload | package/dist/chunk-b8d24ts4.js | — | 12 |
| medium | Remote Payload | package/dist/chunk-hp3b6k4j.js | — | 12 |
| medium | Remote Payload | package/dist/chunk-pt667scp.js | — | 12 |
| medium | Remote Payload | package/dist/chunk-pz313yq8.js | — | 12 |
| medium | Remote Payload | package/dist/chunk-y9b18qce.js | — | 12 |
| medium | Credential file access | package/dist/chunk-12dkd74n.js | — | 10 |
| medium | Credential file access | package/dist/chunk-2fv9089a.js | — | 10 |
| medium | Credential file access | package/dist/chunk-2rnhm735.js | — | 10 |
| medium | Credential file access | package/dist/chunk-3q2d4xh5.js | — | 10 |
| medium | Credential file access | package/dist/chunk-4j5qzvpm.js | — | 10 |
| medium | Credential file access | package/dist/chunk-4wqw507q.js | — | 10 |
| medium | Credential file access | package/dist/chunk-4zpqh818.js | — | 10 |
| medium | Credential file access | package/dist/chunk-5zensta2.js | — | 10 |
| medium | Credential file access | package/dist/chunk-6rqp5q3j.js | — | 10 |
| medium | Credential file access | package/dist/chunk-6x2asdvn.js | — | 10 |
| medium | Credential file access | package/dist/chunk-71pxbqa6.js | — | 10 |
| medium | Credential file access | package/dist/chunk-7jnm7qye.js | — | 10 |
| medium | Credential file access | package/dist/chunk-ajv5y96r.js | — | 10 |
| medium | Credential file access | package/dist/chunk-am5pq8nt.js | — | 10 |
| medium | Credential file access | package/dist/chunk-b8d24ts4.js | — | 10 |
| medium | Credential file access | package/dist/chunk-bbjzyb52.js | — | 10 |
| medium | Credential file access | package/dist/chunk-gdd0nxj3.js | — | 10 |
| medium | Credential file access | package/dist/chunk-hp3b6k4j.js | — | 10 |
| medium | Credential file access | package/dist/chunk-jke5kjet.js | — | 10 |
| medium | Credential file access | package/dist/chunk-jyq7q9ya.js | — | 10 |
| medium | Credential file access | package/dist/chunk-k1qrkf95.js | — | 10 |
| medium | Credential file access | package/dist/chunk-kt1133hr.js | — | 10 |
| medium | Credential file access | package/dist/chunk-mjt00k01.js | — | 10 |
| medium | Credential file access | package/dist/chunk-mv4yh5y6.js | — | 10 |
| medium | Credential file access | package/dist/chunk-n8hhngdw.js | — | 10 |
| medium | Credential file access | package/dist/chunk-nfg3jamb.js | — | 10 |
| medium | Credential file access | package/dist/chunk-pt667scp.js | — | 10 |
| medium | Credential file access | package/dist/chunk-pz313yq8.js | — | 10 |
| medium | Credential file access | package/dist/chunk-qz5m1bq8.js | — | 10 |
| medium | Credential file access | package/dist/chunk-rq2q89pg.js | — | 10 |
| medium | Credential file access | package/dist/chunk-s633zv7b.js | — | 10 |
| medium | Credential file access | package/dist/chunk-smaavvtd.js | — | 10 |
| medium | Credential file access | package/dist/chunk-ve3n24ph.js | — | 10 |
| medium | Credential file access | package/dist/chunk-vj6gqpka.js | — | 10 |
| medium | Credential file access | package/dist/chunk-vnmkv183.js | — | 10 |
| medium | Credential file access | package/dist/chunk-whttf0jv.js | — | 10 |
| medium | Credential file access | package/dist/chunk-y01frwjd.js | — | 10 |
| medium | Credential file access | package/dist/chunk-y9b18qce.js | — | 10 |
| medium | Credential file access | package/dist/chunk-ztnm989w.js | — | 10 |
| low | Install-time lifecycle script | package.json | — | 5 |
| low | Obfuscation Density | package/dist/chunk-4xs38p8q.js | — | 0 |
Manifest
Package metadata
Scripts 16
Sign in to view install / lifecycle script contents.
Dependencies44
@ai-sdk/google^1.0.0@anthropic-ai/sdk^0.66.0@codmir/agent-core1.0.2@codmir/agent-runtime0.1.1@codmir/chat-steps1.0.3@codmir/governor1.0.1@codmir/hybrid-reasoning1.0.3@codmir/import-memory0.1.1@codmir/kernel0.1.3@codmir/overseer1.1.5@codmir/reasoning-chain0.1.1@codmir/sdk2.0.0@codmir/sdk-internal1.0.0@codmir/types2.0.4@google/generative-ai^0.24.1axios^1.6.2chalk^5.3.0chokidar^4.0.1clipboardy^4.0.0commander^12.1.0dotenv^16.3.1eventsource^3.0.7form-data^4.0.5fuse.js^7.0.0glob^11.0.0google-auth-library^9.0.0ink5.2.1ink-select-input^6.2.0ink-spinner^5.0.0ink-text-input^6.0.0- …and 14 more.