PkgRadar

Package evidence

[email protected]

New Account With Lifecycle Hook: package first published 0 day(s) ago, 1 total version(s), has lifecycle hook

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
1
First published
Jun 2026
Publisher
slavarazum

Recommended action

Block this update

Static evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"high"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"high"}'
Publisherslavarazum
Artifact bytes114,915
Previous versionnone
Published2026-06-15T01:22:08.728Z
SHA-2565162165beeb2d0aed1319fb831c57143e053cb8a5de6660cd319d914227a3048

Why flagged

What the scanner saw

New Account With Lifecycle Hook: package first published 0 day(s) ago, 1 total version(s), has lifecycle hook

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

high
Last checked
highRisk
5Score
0.1.0Version
Status history (1 event)
  1. new → available · risk high · score 5 · status changed

Evidence

Static findings

2 static · 0 from release diff · showing high-signal first.

SeverityKindPathDetailPoints
highNew Account With Lifecycle Hookpackage.jsonpackage first published 0 day(s) ago, 1 total version(s), has lifecycle hook25
Show all 2 findings (low-signal and informational)
SeverityKindPathDetailPoints
highNew Account With Lifecycle Hookpackage.jsonpackage first published 0 day(s) ago, 1 total version(s), has lifecycle hook25
lowInstall-time lifecycle scriptpackage.jsonpreinstall="npx -y only-allow pnpm"5

Manifest

Package metadata

Scripts25
  • buildpnpm run build:nuxt-module && pnpm run build:convex-component
  • build:convex-componenttsc --project ./tsconfig.convex-component.build.json && node -e "require('fs').utimesSync('playground/backend/convex.config.ts', new Date(), new Date())"
  • build:nuxt-modulenuxt-module-build build && node scripts/normalize-module-ext.js
  • bumppnpm exec taze major -w
  • db:resetnode scripts/db-reset.js
  • devpnpm run dev:prepare && pnpm run build:convex-component && run-p -r 'dev:convex-component' 'dev:nuxt-module'
  • dev:convex-componentconvex dev --typecheck-components --start 'pnpm run dev:convex-component:watch'
  • dev:convex-component:codegenconvex codegen --component-dir ./src/convex/component
  • dev:convex-component:watchchokidar 'tsconfig*.json' 'src/convex/**/*.ts' -i '**/*.test.ts' -i 'src/convex/component/_generated/**' -c 'pnpm run dev:convex-component:codegen && pnpm run build:convex-component' --initial
  • dev:nuxt-moduleTMPDIR=/tmp portless nuxt-backend nuxt dev playground
  • dev:nuxt-module:buildnuxt build playground
  • dev:nuxt-module:preparepnpm run dev:prepare
  • dev:preparenuxt-module-build build --stub && nuxt-module-build prepare && node scripts/normalize-module-ext.js && nuxt prepare playground
  • linteslint .
  • lint:fixeslint . --fix
  • preinstallnpx -y only-allow pnpm
  • testvitest --run
  • test:convex-componentvitest --project convex-component --run
  • test:e2evitest --project e2e --run
  • test:nuxtvitest --project nuxt --run
  • test:qualityfallow --summary
  • test:typespnpm run test:types:lib && cd playground && vue-tsc --noEmit
  • test:types:libpnpm run dev:prepare && pnpm run build:convex-component && vue-tsc --noEmit && tsc --noEmit -p tsconfig.convex.json
  • test:unitvitest --project unit --run
  • test:watchvitest --watch
Dependencies6
  • @better-auth/passkey~1.6.11
  • @convex-dev/better-auth^0.12.2
  • @nuxt/kit^4.4.5
  • better-auth~1.6.11
  • convex^1.40.0
  • dedent^1.7.2