Package evidence
[email protected]
Js Hidden Powershell: Hidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers.
Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Versions published
- 1
- First published
- Jun 2026
- Publisher
- liuwensheng
Recommended action
Block this updateStatic evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["[email protected]"],"fail_on":"high"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["[email protected]"],"fail_on":"high"}'Why flagged
What the scanner saw
Js Hidden Powershell: Hidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers.
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk high · score 104 · status changed
Evidence
Static findings
11 static · 0 from release diff · showing high-signal first.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| high | Js Hidden Powershell | package/src/tools/PowerShellTool/pathValidation.ts | Hidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers. | 45 |
| high | Js Hidden Powershell | package/src/utils/permissions/permissions.ts | Hidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers. | 45 |
| high | Js Hidden Powershell | package/src/utils/permissions/yoloClassifier.ts | Hidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers. | 45 |
| medium | Remote Payload | package/src/utils/plugins/installCounts.ts | matched "raw.githubusercontent.com" | 12 |
| medium | Remote Payload | package/src/utils/releaseNotes.ts | matched "raw.githubusercontent.com" | 12 |
Show all 11 findings (low-signal and informational)
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| high | Js Hidden Powershell | package/src/tools/PowerShellTool/pathValidation.ts | Hidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers. | 45 |
| high | Js Hidden Powershell | package/src/utils/permissions/permissions.ts | Hidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers. | 45 |
| high | Js Hidden Powershell | package/src/utils/permissions/yoloClassifier.ts | Hidden / non-interactive PowerShell invocation in package code — `-WindowStyle Hidden`, `irm | iex`, `windowsHide: true`, or equivalent — used to download-and-run payloads on Windows installers. | 45 |
| medium | Remote Payload | package/src/utils/plugins/installCounts.ts | matched "raw.githubusercontent.com" | 12 |
| medium | Remote Payload | package/src/utils/releaseNotes.ts | matched "raw.githubusercontent.com" | 12 |
| low | Credential file access | package/src/services/api/client.ts | matched "GOOGLE_APPLICATION_CREDENTIALS" | 5 |
| low | Credential file access | package/src/utils/ide.ts | matched ".npmrc" | 5 |
| low | Credential file access | package/src/tools/BashTool/prompt.ts | matched ".ssh/" | 5 |
| low | Credential file access | package/src/utils/subprocessEnv.ts | matched "AWS_SECRET_ACCESS_KEY" | 5 |
| low | Credential file access | package/src/utils/settings/types.ts | matched ".ssh/" | 5 |
| low | Install-time lifecycle script | package.json | postinstall="node scripts/postinstall.mjs" | 5 |
Manifest
Package metadata
Scripts4
clinode --import tsx src/entrypoints/cli.tsxpostinstallnode scripts/postinstall.mjssetupnode scripts/setup.mjsstartnode --import tsx src/entrypoints/cli.tsx
Dependencies88
@alcalzone/ansi-tokenize^0.3.0@anthropic-ai/bedrock-sdk^0.26.4@anthropic-ai/claude-agent-sdklatest@anthropic-ai/foundry-sdk^0.2.3@anthropic-ai/sdklatest@aws-sdk/client-bedrocklatest@aws-sdk/client-bedrock-runtimelatest@aws-sdk/client-stslatest@aws-sdk/credential-provider-nodelatest@aws-sdk/credential-providerslatest@azure/identitylatest@commander-js/extra-typings12@growthbook/growthbooklatest@modelcontextprotocol/sdklatest@opentelemetry/apilatest@opentelemetry/api-logslatest@opentelemetry/corelatest@opentelemetry/exporter-logs-otlp-grpclatest@opentelemetry/exporter-logs-otlp-httplatest@opentelemetry/exporter-logs-otlp-protolatest@opentelemetry/exporter-metrics-otlp-grpclatest@opentelemetry/exporter-metrics-otlp-httplatest@opentelemetry/exporter-metrics-otlp-protolatest@opentelemetry/exporter-prometheuslatest@opentelemetry/exporter-trace-otlp-grpclatest@opentelemetry/exporter-trace-otlp-httplatest@opentelemetry/exporter-trace-otlp-protolatest@opentelemetry/resourceslatest@opentelemetry/sdk-logslatest@opentelemetry/sdk-metricslatest- …and 58 more.