Package evidence

[email protected]

New Account With Lifecycle Hook: package first published 36 day(s) ago, 6 total version(s), has lifecycle hook

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 5
Versions published: 6
First published: May 2026
Publisher: faiyyaz

Recommended action

Block this update

Static evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"high"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"high"}'

Publisherfaiyyaz

Artifact bytes86,968

Previous version0.0.5

Published2026-06-08T11:10:21.448Z

SHA-256165d60c8d7f0c08a88c428a469ea87f34ef2d3281073a40e197002ae7dacd294

Why flagged

What the scanner saw

New Lifecycle Script Vs Previous: postinstall added in 0.0.6 vs 0.0.5: "patch-package"

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

high

14h agoLast checked

highRisk

45Score

0.0.6Version

Status history (1 event)

new → available14h ago · risk high · score 45 · status changed

Evidence

Static findings

2 static · 1 from release diff · showing high-signal first.

Severity	Kind	Path	Detail	Points
high	New Lifecycle Script Vs Previous	package.json	postinstall added in 0.0.6 vs 0.0.5: "patch-package"	40
medium	New Account With Lifecycle Hook	package.json	package first published 36 day(s) ago, 6 total version(s), has lifecycle hook	10

Show all 3 findings (low-signal and informational)

Severity	Kind	Path	Detail	Points
high	New Lifecycle Script Vs Previous	package.json	postinstall added in 0.0.6 vs 0.0.5: "patch-package"	40
medium	New Account With Lifecycle Hook	package.json	package first published 36 day(s) ago, 6 total version(s), has lifecycle hook	10
low	Install-time lifecycle script	package.json	postinstall="patch-package"	5

Manifest

Package metadata

Scripts11

androidreact-native run-android
cli:packnpm pack ./packages/cli --cache /private/tmp/create-mobile-foundation-npm-cache
cli:pack:dry-runnpm pack --dry-run ./packages/cli --cache /private/tmp/create-mobile-foundation-npm-cache
cli:publishnpm publish ./packages/cli --cache /private/tmp/create-mobile-foundation-npm-cache
cli:setupnode ./packages/cli/bin/structure-setup.js
iosreact-native run-ios
linteslint .
postinstallpatch-package
setup:clinode ./packages/cli/bin/structure-setup.js
startreact-native start
testjest

Dependencies43

@bam.tech/react-native-image-resizer^3.0.11
@react-native-async-storage/async-storage^2.2.0
@react-native-community/netinfo^12.0.1
@react-native-firebase/analytics^24.0.0
@react-native-firebase/app^24.0.0
@react-native-firebase/auth^24.0.0
@react-native-firebase/crashlytics^24.0.0
@react-native-firebase/firestore^24.0.0
@react-native-firebase/storage^24.0.0
@react-navigation/bottom-tabs^7.15.10
@react-navigation/drawer^7.9.9
@react-navigation/material-top-tabs^7.4.24
@react-navigation/native^7.2.2
@react-navigation/stack^7.8.11
@shopify/flash-list^2.3.1
axios^1.15.2
expo~55.0.0
expo-calendar^55.0.14
expo-image^55.0.9
expo-updates^55.0.21
lodash^4.18.1
luxon^3.7.2
nanoid^5.1.9
react19.2.0
react-native0.83.6
react-native-actions-sheet^10.1.2
react-native-bootsplash^7.3.1
react-native-gesture-handler^2.31.1
react-native-haptic-feedback^3.0.0
react-native-image-picker^8.2.1
…and 13 more.